H3C H3C S7500E-X, Руководство по настройке

Страница: 67 / 290

54
Configuring port isolation
The port isolation feature isolates Layer 2 traffic for data privacy and security without using VLANs.
Ports in an isolation group cannot communicate with each other. However, they can communicate
with ports outside the isolation group.
Assigning a port to an isolation group
The device supports multiple isolation groups, which can be configured manually. The number of
ports assigned to an isolation group is not limited.
To assign a port to an isolation group:
Step Command Remarks
1.
Enter system view.
system-view
N/A
2.
Create an isolation
group.
port-isolate group
group-number
By default, no isolation group exists.
3.
Enter interface view.
•
Enter Layer 2 Ethernet
interface view:
interface interface-type
interface-number
•
Enter Layer 2 aggregate
interface view:
interface
bridge-aggregation
interface-number
•
The configuration in Layer 2
Ethernet interface view applies only
to the interface.
•
The configuration in Layer 2
aggregate interface view applies to
the Layer 2 aggregate interface and
its aggregation member ports. If the
device fails to apply the
configuration to the aggregate
interface, it does not assign any
aggregation member port to the
isolation group. If the failure occurs
on an aggregation member port, the
device skips the port and continues
to assign other aggregation member
ports to the isolation group.
4.
Assign the port to the
isolation group.
port-isolate enable group
group-number
By default, the port is not in any isolation
group.
You can assign a port to only one
isolation group. If you execute the
port-isolate enable group
command
multiple times, the most recent
configuration takes effect.
If a PEX port is added to a Layer 2
aggregate interface after the interface is
assigned to an isolation group, perform
the following tasks to isolate the PEX port
from other ports in the isolation group:
5.
Remove the Layer 2 aggregate
interface from the isolation group.
6.
Reassign the Layer 2 aggregate
interface to the isolation group.
For more information about PEX ports,
see
Virtual Technologies Configuration
Guide
.