H3C S3610-28P Operation Manual page 176

Operation Manual – Port Correlation Configuration
H3C S3610&S5510 Series Ethernet Switches
Ethernet 1/0/1, Ethernet 1/0/2, Ethernet 1/0/3, and Ethernet 1/0/4 belong to the
same VLAN. It is desired that Host A, Host B, and Host C cannot communicate
with each other, but can access the external network.
II. Networking diagram
Figure 2-2 Networking diagram for port isolation configuration on a distributed device
III. Configuration procedure
Configuration procedure on a centralized device
# Add ports Ethernet 1/0/1, Ethernet 1/0/2 and Ethernet 1/0/3 to the isolation group.
<Device> system-view
[Device] interface ethernet 1/0/1
[Device-Ethernet1/0/1] port-isolate enable
[Device-Ethernet1/0/1] quit
[Device] interface ethernet 1/0/2
[Device-Ethernet1/0/2] port-isolate enable
[Device-Ethernet1/0/2] quit
[Device] interface ethernet 1/0/3
[Device-Ethernet1/0/3] port-isolate enable
# Configure port Ethernet 1/0/4 as the uplink port of the isolation group.
[Device-Ethernet1/0/3] quit
[Device] interface ethernet 1/0/4
[Device-Ethernet1/0/4] port-isolate uplink-port
[Device-Ethernet1/0/4] return
# Display the information about the isolation group.
<Device> display port-isolate group
Port-isolate group information:
Uplink port support: YES
Chapter 2 Port Isolation Configuration
2-4