Introduction To Port Isolation; Configuring An Isolation Group; Chapter 2 Port Isolation Configuration; Adding A Port To An Isolation Group - H3C S7500E Series Operation Manual

Operation Manual – Port Correlation Configuration
H3C S7500E Series Ethernet Switches

Chapter 2 Port Isolation Configuration

When configuring port isolation, go to these sections for information you are interested
in:

Introduction to Port Isolation

Configuring an Isolation Group

Displaying Isolation Groups
Port Isolation Configuration Example
2.1 Introduction to Port Isolation
To implement Layer 2 isolation, you can add different ports to different VLANs. However,
this will waste the limited VLAN resource. With port isolation, the ports can be isolated
within the same VLAN. Thus, you need only to add the ports to the isolation group to
implement Layer 2 isolation. This provides you with more secure and flexible
networking schemes.
On the current device:
A device supports only one isolation group that is created automatically by the
system as Isolation Group 1. The user can neither delete the isolation group nor
create other isolation groups.
There is no restriction on the number of ports to be added to an isolation group.
A port inside an isolation group and a port outside the isolation group can
communicate with each other at Layer 2. Ports of the isolation group cannot
communicate with each other.
2.2 Configuring an Isolation Group

2.2.1 Adding a Port to an Isolation Group

Follow these steps to add a port to an isolation group:
To do...
Enter system view
Enter
Etherne
t port
view or
port
group
view
Use the command...
system-view
Enter
Etherne
interface interface-type
t port
interface-number
view
Enter
port-group { manual
port
port-group-name |
group
aggregation agg-id }
view
Chapter 2 Port Isolation Configuration
—
Use either command.
Configured in Ethernet port view,
the setting is effective on the
current port only; configured in
port group view, the setting is
effective on all ports in the port
group.
2-1
Remarks