Vlan; Port Isolation; Cli Configuration - Tripp Lite NGI-S05C2POE4 Owner's Manual

6.6. VLAN

6.6.1.

Port Isolation

The port isolation is a port-based virtual LAN feature. It partitions the switching ports into
virtual private domains designated on a per port basis. Data switching outside of the port's
private domain is not allowed. It will ignore the packets' tag VLAN information.
This feature is a per port setting to configure the egress port(s) for the specific port to forward
its received packets. If the CPU port (port 0) is not an egress port for a specific port, the host
connected to the specific port cannot manage the Switch.
If you wish to allow two subscriber ports to talk to each other, you must define the egress port
for both ports. CPU refers to the Switch management port. By default it forms a VLAN with all
Ethernet ports. If it does not form a VLAN with a particular port then the Switch cannot be
managed from that port.

6.6.1.1. CLI Configuration

Node Command
enable show port-isolation
enable configure terminal
configure interface IFNAME
interface port-isolation ports
PORTLISTS
interface no port-isolation
Example: If you want to allow port-1 and port-3 to talk to each other, you must configure as
below:
L2SWITCH(config)#interface 1/0/1
L2SWITCH(config-if)#port-isolation ports 3
L2SWITCH(config-if)#exit
Allow the port-1 to send its ingress packets to port 3.
L2SWITCH(config)#interface 1/0/3
L2SWITCH(config-if)#port-isolation ports 1
L2SWITCH(config-if)#exit
Allow the port 3 to send its ingress packets to port 1
Description
This command displays the current port isolation
configurations.
"V" indicates the port's packets can be sent to that port.
"-" indicates the port's packets cannot be sent to that
port.
This command changes the node to configure node.
This command enters the interface configure node.
This command configures a port or a range of ports to
egress traffic from the specific port.
This command configures all ports to egress traffic
from the specific port.
109