H3C S7500E Series Command Reference Manual page 210

You cannot assign the member ports of a service loopback group to an isolation group, and vice versa.
Examples
# Assign ports GigabitEthernet 2/0/1 and GigabitEthernet 2/0/2 to the isolation group.
<Sysname> system-view
[Sysname] interface gigabitethernet 2/0/1
[Sysname-GigabitEthernet2/0/1] port-isolate enable
[Sysname-GigabitEthernet2/0/1] quit
[Sysname] interface gigabitethernet 2/0/2
[Sysname-GigabitEthernet2/0/2] port-isolate enable
# Assign all ports in port group aa to the isolation group.
<Sysname> system-view
[Sysname] port-group manual aa
[Sysname-port-group-manual-aa] group-member gigabitethernet 2/0/1
[Sysname-port-group-manual-aa] group-member gigabitethernet 2/0/2
[Sysname-port-group-manual-aa] group-member gigabitethernet 2/0/3
[Sysname-port-group-manual-aa] group-member gigabitethernet 2/0/4
[Sysname-port-group-manual-aa] port-isolate enable
# Assign Layer-2 aggregate interface Bridge-aggregation 1 to the isolation group.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] quit
[Sysname] interface gigabitethernet 2/0/1
[Sysname-GigabitEthernet2/0/1] port link-aggregation group 1
[Sysname-GigabitEthernet2/0/1] quit
[Sysname] interface gigabitethernet 2/0/2
[Sysname-GigabitEthernet2/0/2] port link-aggregation group 1
[Sysname-GigabitEthernet2/0/2] quit
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] port-isolate enable
10-3