H3C S5120-SI Series, Руководство по эксплуатации

Страница: 91 / 697

1-1
1
Port Isolation Configuration
When configuring port isolation, go to these sections for information you are interested in:
z
Introduction to Port Isolation
z
Configuring an Isolation Group for a Multiple-Isolation-Group Device
z
Displaying and Maintaining Isolation Groups
z
Port Isolation Configuration Example
Introduction to Port Isolation
Usually, Layer 2 traffic isolation is achieved by assigning ports to different VLANs. To save VLAN
resources, port isolation is introduced to isolate ports within a VLAN, allowing for great flexibility and
security.
Currently:
z
S5120-SI series Ethernet switches support multiple isolation groups which can be configured
manually. These devices are referred to as multiple-isolation-group devices.
z
There is no restriction on the number of ports assigned to an isolation group.
Within the same VLAN, Layer 2 data transmission between ports within and outside the isolation group
is supported.
Configuring an Isolation Group for a Multiple-Isolation-Group
Device
Adding a Port to an Isolation Group
Follow these steps to configure an isolation group for a multiple-isolation-group device:
To do… Use the command… Remarks
Enter system view
system-view
—
Create an isolation group port-isolate group group-number Required
Enter
Ethernet
interface
view
interface interface-type
interface-number
Enter
Layer-2
aggregate
interface
view
interface bridge-aggregation
interface-number
Enter
interface
view, or port
group view
Enter port
group view port-group manual
port-group-name
Required
Use one of the commands.
z
In Ethernet interface view,
the subsequent
configurations apply to the
current port
z
In Layer-2 aggregate
interface view, the
subsequent configurations
apply to the Layer-2
aggregate interface and all
its member ports.
z
In port group view, the
subsequent configurations
apply to all ports in the port
group.