Configure Layer 2 Isolation Between Ports - Huawei Quidway S3500 Series Operation Manual

Operation Manual - Network Protocol
Quidway S3500 Series Ethernet Switches
Table 8-2 Configure the access IP address pool based on the physical port
Configure the access management IP
address pool based on the physical port
Cancel part or all of the IP addresses in
the access management IP address pool
of the port
By default, the IP address pools for access control on the port are null and all the
packets are permitted through.
Note that if the IP address pool to be configured contains the IP addresses configured
in the static ARP at other ports, then the system prompts you to delete the static ARP to
make the later binding effective.

8.2.3 Configure Layer 2 Isolation between Ports

You can use the following command to set Layer 2 isolation on a port so as to prevent
the packets from being forwarded on Layer 2 between the specified port and some
other ports (group).
Perform the following configuration in Ethernet interface view.
Table 8-3 Configure Layer 2 isolation between ports
Configure Layer 2 isolation between ports
Cancel Layer 2 isolation between ports
By default, the isolation port pool is null and the packets are allowed to be forwarded
between the specified port and all other ports on Layer 2.
Note that: S3526E/S3526E FS/S3526E FM/S3526C/S3026E/S3026E FS/S3026E FM
switches support this configuration in S3500 series switches.
8.2.4 Configuring Port Isolation on a Per-VLAN Basis
I. Isolate Ports in VLAN
You can use the following command to configure the layer 2 isolation between ports in
VLAN. This isolation disables the layer 2 forwarding between ports.
Perform the following configuration in VLAN view.
Operation
Operation
Huawei Technologies Proprietary
8-3
Chapter 8 Access Management Configuration
Command
am ip-pool address-list
undo am ip-pool { all | address-list }
Command
am isolate interface-list
undo am isolate interface-list