Introduction To Port Isolation - H3C S3610-28P Operation Manual

Operation Manual – Port Correlation Configuration
H3C S3610&S5510 Series Ethernet Switches
Chapter 2 Port Isolation Configuration

2.1 Introduction to Port Isolation

To implement Layer 2 isolation, you can add different ports to different VLANs. However,
this will waste the limited VLAN resource. With port isolation, the ports can be isolated
within the same VLAN. Thus, you need only to add the ports to the isolation group to
implement Layer 2 isolation. This provides you with more secure and flexible
networking schemes.
On the current device:
Currently, only one isolation group is supported on a device, which is created
automatically by the system as isolation group 1. The user cannot remove the
isolation group or create other isolation groups.
The number of the ports an isolation group can contain is not limited.
Note:
When a port in an aggregation group is configured as the ordinary port for some
isolation group, the other ports of the aggregation group can be added to the
isolation group as ordinary ports but cannot be configured as uplink ports.
When a port in an aggregation group is configured as the uplink port for some
isolation group, the other ports of the aggregation group cannot be added to the
isolation group and the other ports of the device cannot be added to the aggregation
group. For details of aggregation group refer to Link Aggregation Configuration.
Port isolation is independent of the VLAN the port belongs to.
For ports belonging to different VLANs, Layer 2 data can pass only from the
ordinary port to the uplink port in the same isolation group unidirectionally.
Within the same VLAN, there are two types of connectivity of Layer 2 data on ports
within and outside the isolation group, as shown in
Chapter 2 Port Isolation Configuration
Figure
2-1
2-1.