
175
Use the
undo isolated-vlan enable
command to restore the default.
By default, ports in the same secondary VLAN can communicate with one another at Layer 2.
•
After you configure the
isolated-vlan enable
command in secondary VLAN view, you cannot assign
any port in the secondary VLAN to an isolation group. For more information about isolation groups,
see the
Layer 2—LAN Switching Configuration Guide
.
•
Layer 2 isolation configured with the
isolated-vlan enable
command takes effect only after the
secondary VLAN is associated with an isolate-user-VLAN.
Examples
# Configure Layer 2 isolation between ports in secondary VLAN 4.
<Sysname> system-view
[Sysname] vlan 2
[Sysname-vlan2] isolate-user-vlan enable
[Sysname-vlan2] port gigabitethernet 1/0/2
[Sysname-vlan2] vlan 3
[Sysname-vlan3] port gigabitethernet 1/0/3
[Sysname-vlan3] vlan 4
[Sysname-vlan4] port gigabitethernet 1/0/4
[Sysname-vlan4] quit
[Sysname] isolate-user-vlan 2 secondary 3 to 4
[Sysname] vlan 4
[Sysname-vlan4] isolated-vlan enable
port isolate-user-vlan
Syntax
port isolate-user-vlan
{
host
|
promiscuous
}
undo port isolate-user-vlan
View
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Default level
2: System level
Parameters
host
: Configures the port as a downstream port.
promiscuous
: Configures the port as an upstream port.
Description
Use the
port isolate-user-vlan
command to configure the isolate-user-VLAN type of a port.
Use the
undo port isolate-user-vlan
command to restore the default setting.
By default, no isolate-user-VLAN type is configured for a port.
Related commands:
isolate-user-vlan
.
Examples
# Configure the access port GigabitEthernet 1/0/1 as a downstream port.
<Sysname> system-view