H3C SR8800 Configuration Manual page 104

Configure that Host A, Host B, and Host C cannot exchange Layer 2 traffic with each other, but can
access the external network.
Figure 31 Networking diagram
Configuration procedure
# Create isolation group 2.
<Device> system-view
[Device] port-isolate group 2
# Add GigabitEthernet 3/1/1, GigabitEthernet 3/1/2, and GigabitEthernet 3/1/3 to isolation group
2 as isolated ports.
[Device] interface GigabitEthernet 3/1/1
[Device-GigabitEthernet3/1/1] port-isolate enable group 2
[Device-GigabitEthernet3/1/1] quit
[Device] interface GigabitEthernet 3/1/2
[Device-GigabitEthernet3/1/2] port-isolate enable group 2
[Device-GigabitEthernet3/1/2] quit
[Device] interface GigabitEthernet 3/1/3
[Device-GigabitEthernet3/1/3] port-isolate enable group 2
[Device-GigabitEthernet3/1/3] quit
# Configure GigabitEthernet 3/1/4 as the uplink port of isolation group 2.
[Device] interface GigabitEthernet 3/1/4
[Device-GigabitEthernet3/1/4] port-isolate uplink-port group 2
[Device-GigabitEthernet3/1/4] return
# Display information about isolation group 2.
<Device> display port-isolate group 2
Port-isolate group information:
Uplink port support: YES
Group ID: 2
Uplink port: GigabitEthernet3/1/4
Group members:
GigabitEthernet3/1/1 GigabitEthernet3/1/2 GigabitEthernet3/1/3
94