To do...
Assign the port or ports
to the isolation group as
an isolated port or ports
After you configure a command on a Layer-2 aggregate interface, the system starts applying the
configuration to the aggregate interface and its aggregation member ports. If the system fails to do that
on the aggregate interface, it stops applying the configuration to the aggregation member ports. If it fails
to do that on an aggregation member port, it simply skips the port and moves to the next port.
Displaying and Maintaining Isolation Groups
To do...
Display the isolation group
information on a
single-isolation-group device
Port Isolation Configuration Example
Network requirements
Users Host A, Host B, and Host C are connected to GigabitEthernet 2/0/1, GigabitEthernet 2/0/2,
and GigabitEthernet 2/0/3 of Device.
Device is connected to the Internet through GigabitEthernet 2/0/4.
GigabitEthernet 2/0/2, GigabitEthernet 2/0/3, and GigabitEthernet 2/0/4 belong to VLAN 2 and
GigabitEthernet 2/0/1 carries VLAN 2.
It is required that Host A, Host B, and Host C can access the Internet while being isolated from one
another.
Use the command...
port-isolate enable
Use the command...
display port-isolate group
1-2
Remarks
Required
No ports are added to the isolation group
by default.
Remarks
Available in any view