H3C S5600 SERIES Operation Manual page 176

1
Port Isolation Configuration
When configuring port isolation, go to these sections for information you are interested in:
Port Isolation Overview
Port Isolation Configuration
Displaying and Maintaining Port Isolation Configuration
Port Isolation Configuration Example
Port Isolation Overview
Through the port isolation feature, you can add the ports to be controlled into an isolation group to
isolate the Layer 2 and Layer 3 data between each port in the isolation group. Thus, you can construct
your network in a more flexible way and improve your network security.
Currently, you can create only one isolation group on an S5600 Series Ethernet switch. The number of
Ethernet ports in an isolation group is not limited.
An isolation group only isolates the member ports in it.
Port isolation is independent of VLAN configuration.
Port Isolation Configuration
You can perform the following operations to add an Ethernet ports to an isolation group, thus isolating
Layer 2 and Layer 3 data among the ports in the isolation group.
Follow these steps to configure port isolation:
To do ...
Enter system view
Enter Ethernet port view
Add the Ethernet port to the
isolation group
Use the command ...
system-view
interface interface-type
interface-number
port isolate
1-1
Remarks
—
—
Required
By default, an isolation group
contains no port.