Port isolation configuration
This feature is available on only a SAP interface card working in bridge mode.
Usually, Layer 2 traffic isolation is achieved by assigning ports to different VLANs. To save VLAN
resources, port isolation is introduced to isolate ports within a VLAN, allowing for great flexibility and
security.
The routers support only one isolation group that is created automatically by the system as isolation group
1. You can neither remove the isolation group nor create other isolation groups.
Configuring an isolation group
Assigning a port to the isolation group
To add a port to the isolation group:
To do...
1.
Enter system view
2.
Enter
interface
view or
port group
view
3.
Assign the port or ports to
the isolation group as an
isolated port or ports
After you configure a command on a Layer 2 aggregate interface, the system starts applying the
configuration to the aggregate interface and its aggregation member ports. If the system fails to do that
on the aggregate interface, it stops applying the configuration to the aggregation member ports. If it fails
to do that on an aggregation member port, it simply skips the port and moves to the next port.
Displaying and maintaining isolation groups
To do...
Display the isolation group
information
Use the command...
system-view
Enter
Ethernet
interface interface-type
interface
interface-number
view
Enter Layer
interface
2 aggregate
bridge-aggregation
interface
interface-number
view
Enter port
port-group manual
group view
port-group-name
port-isolate enable
Use the command...
display port-isolate group [ | { begin |
exclude | include } regular-expression ]
Remarks
—
Required.
Use one of the commands.
•
In Ethernet interface view, the subsequent
configurations apply to the current port.
•
In Layer 2 aggregate interface view, the
subsequent configurations apply to the
Layer 2 aggregate interface and all its
member ports.
•
In port group view, the subsequent
configurations apply to all ports in the port
group.
Required.
No ports are added to the isolation group by
default.
39
Remarks
Available in any view