Port Isolation Configuration
64
Chapter 8. Port Isolation
Configuration
8.1 Introduction to Port Isolation
To implement Layer 2 isolation, you can add different ports to different VLANs. However,
this will waste the limited VLAN resource. With port isolation, the ports can be isolated within
the same VLAN. Thus, you need only to add the ports to the isolation group to implement
Layer 2 isolation. This provides you with more secure and flexible networking schemes.
On the current device:
Currently, only one isolation group is supported on a device, which is created automatically
by the system as isolation group. The user cannot remove the isolation group or create other
isolation groups.
The number of the ports an isolation group can contain is total port number-1. Because
isolated ports are downlink ports. There should be at least one uplink port.
Note:
When a port in an aggregation group is configured as the member of isolation group,
the other ports of the aggregation group will not be downlink ports.
8.2 Port Isolation Configuration
8.2.1 Port Isolation Configuration
Add a port to port-isolation group. The isolated port members cannot communicate with
each other, but can only communicate with un-isolated port. Use no port-isolation command
to delete a port from the isolated group.
Table 8-1 Configure port isolation
Operation
Command
Remarks
Enter global configuration
mode
configure terminal
-
Configure port isolation
isolate-port interface-number
Required
