Port Isolate-User-Vlan - H3C S7500E Series Command Reference Manual

Parameters
None
Description
Use the isolated-vlan enable command to configure Layer 2 isolation between ports in the same
secondary VLAN.
Use the undo isolated-vlan enable command to restore the default.
By default, ports in the same secondary VLAN can communicate with one another at Layer 2.
After you configure the isolated-vlan enable command in secondary VLAN view, you cannot
assign any port in the secondary VLAN to an isolation group. For more information about an
isolation group, see Port Isolation in the Layer 2 – LAN Switching Configuration Guide.
Layer 2 isolation configured with the isolated-vlan enable command takes effect only after the
secondary VLAN is associated with an isolate-user-VLAN.
Examples
# Configure Layer 2 isolation between ports in secondary VLAN 4.
<Sysname> system-view
[Sysname] vlan 2
[Sysname-vlan2] isolate-user-vlan enable
[Sysname-vlan2] port gigabitethernet 2/0/2
[Sysname-vlan2] vlan 3
[Sysname-vlan3] port gigabitethernet 2/0/3
[Sysname-vlan3] vlan 4
[Sysname-vlan4] port gigabitethernet 2/0/4
[Sysname-vlan4] quit
[Sysname] isolate-user-vlan 2 secondary 3 to 4
[Sysname] vlan 4
[Sysname-vlan4] isolated-vlan enable

port isolate-user-vlan

Syntax
port isolate-user-vlan { host | promiscuous }
undo port isolate-user-vlan
View
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Default Level
2: System level
Parameters
host: Configures the port as a downstream port.
promiscuous: Configures the port as an upstream port.
Description
Use the port isolate-user-vlan command to configure the isolate-user-VLAN type of a port.
Use the undo port isolate-user-vlan command to restore the default setting.
15-5