62
Port isolation configuration example
Network requirements
As shown in
, configure port isolation on the device to meet the following requirements:
•
The hosts can access the Internet.
•
The hosts cannot communicate with each other at Layer 2.
Figure 16 Network diagram
Configuration procedure
# Create isolation group 2.
<Device> system-view
[Device] port-isolate group 2
# Assign GigabitEthernet 1/0/1, GigabitEthernet 1/0/2, and GigabitEthernet 1/0/3 to isolation group
2.
[Device] interface gigabitethernet 1/0/1
[Device-GigabitEthernet1/0/1] port-isolate enable group 2
[Device-GigabitEthernet1/0/1] quit
[Device] interface gigabitethernet 1/0/2
[Device-GigabitEthernet1/0/2] port-isolate enable group 2
[Device-GigabitEthernet1/0/2] quit
[Device] interface gigabitethernet 1/0/3
[Device-GigabitEthernet1/0/3] port-isolate enable group 2
Verifying the configuration
# Display information about isolation group 2.
[Device] display port-isolate group 2
Port isolation group information:
Group ID: 2
Group members:
GigabitEthernet1/0/1
Internet
Host A
Host B
Host C
GE1/0/2
GE1/0/1
GE1/0/3
Device
GE1/0/4