INS_CWGE24MS2_REV–
10/05/16 PAGE 94
INSTALLATION AND OPERATION MANUAL
CWGE24MS2
TECH SUPPORT: 1.888.678.9427
VLAN
Port Isolation
Introduction
The port isolation is a port-based virtual LAN feature. It partitions the switching ports into virtual
private domains designated on a per port basis. Data switching outside of the port’s private
domain is not allowed. It will ignore the packets’ tag VLAN information.
This feature is a per port setting to configure the egress port(s) for the specific port to forward
its received packets. If the CPU port (port 0) is not an egress port for a specific port, the host
connected to the specific port cannot manage the Switch.
If you wish to allow two subscriber ports to talk to each other, you must define the egress port
for both ports. CPU refers to the Switch management port. By default it forms a VLAN with
all Ethernet ports. If it does not form a VLAN with a particular port then the Switch cannot be
managed from that port.
Example: If you want to allow port-1 and port-3 to talk to each other, you must configure as below:
CWGE24MS2(config)#interface 1/0/1
CWGE24MS2(config-if)#port-isolation ports 3
CWGE24MS2(config-if)#exit
; Allow the port-1 to send its ingress packets to port-3.
CWGE24MS2(config)#interface 1/0/3
CWGE24MS2(config-if)#port-isolation ports 1
CWGE24MS2(config-if)#exit
; Allow the port-3 to send its ingress packets to port-1
CLI Configuration
Node
Command
Description
enable
show port-isolation This command displays the current port isolation configurations.
“V”
indicates the port’s packets can be sent to that port.
“-”
indicates the port’s packets cannot be sent to that port.
interface
port-isolation ports
PORTLISTS
This command configures a port or a range of ports to egress traffic from
the specific port.
interface
no port-isolation
This command configures all ports to egress traffic from the specific
port.
Example:
CWGE24MS2(config)#interface 1/0/2
CWGE24MS2(config-if)#port-isolation ports 3-10
