1
Port Isolation Configuration
When configuring port isolation, go to these sections for information you are interested in:
Introduction to Port Isolation
Configuring the Isolation Group
Displaying and Maintaining Isolation Groups
Port Isolation Configuration Example
Introduction to Port Isolation
Usually, Layer 2 traffic isolation is achieved by assigning ports to different VLANs. To save VLAN
resources, port isolation is introduced to isolate ports within a VLAN, allowing for great flexibility and
security.
Currently:
S7900E series Ethernet switches support only one isolation group that is created automatically by
the system as isolation group 1. These devices are referred to as single-isolation-group devices.
You can neither remove the isolation group nor create other isolation groups on such devices.
Layer 2 traffic can be exchanged between a port inside an isolation group and a port outside the
isolation group, but not between ports inside the isolation group.
There is no restriction on the number of ports assigned to an isolation group.
Configuring the Isolation Group
Assigning a Port to the Isolation Group
Follow these steps to add a port to the isolation group:
To do...
Enter system view
Enter
Ethernet
port or
OLT port
view
Enter port
view or,
Enter
port group
Layer-2
view
aggregate
interface
view
Enter port
group view
Use the command...
system-view
interface interface-type
interface-number
interface
bridge-aggregation
interface-number
port-group manual
port-group-name
1-1
Remarks
—
Required
Use one of the commands.
In Ethernet port or OLT port view, the
subsequent configurations apply to
the current port.
In Layer-2 aggregate interface view,
the subsequent configurations apply
to the Layer-2 aggregate interface
and all its member ports.
In port group view, the subsequent
configurations apply to all ports in the
port group.
Need help?
Do you have a question about the S7906E and is the answer not in the manual?