Configuring Port Isolation; Assigning A Port To An Isolation Group - H3C S7500E-X Configuration Manual

Configuring port isolation

The port isolation feature isolates Layer 2 traffic for data privacy and security without using VLANs.
Ports in an isolation group cannot communicate with each other. However, they can communicate
with ports outside the isolation group.

Assigning a port to an isolation group

The device supports multiple isolation groups, which can be configured manually. The number of
ports assigned to an isolation group is not limited.
To assign a port to an isolation group:
Step
Enter system view.
1.
Create an isolation
2.
group.
Enter interface view.
3.
Assign the port to the
4.
isolation group.
Command
system-view
port-isolate group
group-number
•
Enter Layer 2 Ethernet
interface view:
interface interface-type
interface-number
•
Enter Layer 2 aggregate
interface view:
interface
bridge-aggregation
interface-number
port-isolate enable group
group-number
54
Remarks
N/A
By default, no isolation group exists.
•
The configuration in Layer 2
Ethernet interface view applies only
to the interface.
•
The configuration in Layer 2
aggregate interface view applies to
the Layer 2 aggregate interface and
its aggregation member ports. If the
device fails to apply the
configuration to the aggregate
interface, it does not assign any
aggregation member port to the
isolation group. If the failure occurs
on an aggregation member port, the
device skips the port and continues
to assign other aggregation member
ports to the isolation group.
By default, the port is not in any isolation
group.
You can assign a port to only one
isolation group. If you execute the
port-isolate enable group command
multiple times, the most recent
configuration takes effect.
If a PEX port is added to a Layer 2
aggregate interface after the interface is
assigned to an isolation group, perform
the following tasks to isolate the PEX port
from other ports in the isolation group:
Remove the Layer 2 aggregate
5.
interface from the isolation group.
Reassign the Layer 2 aggregate
6.
interface to the isolation group.
For more information about PEX ports,
see Virtual Technologies Configuration
Guide.