T3700G-28TQ
JetStream 28-Port Gigabit Stackable L3 Managed Switch CLI Guide
Chapter 26 Port isolation Commands
Port Isolation provides a method of restricting traffic flow to improve the network security by
forbidding the port to forward packets to the ports that are not on its forwarding port list.
port isolation
Description
The port isolation command is used to configure the forward port list of a port,
so that this port can only communicate with the ports on its port list. To delete
the corresponding configuration, please use no port isolation command.
Syntax
port isolation { [fa-forward-list fa-forward-list ] [gi-forward-list gi-forward-list]
ten-gi-forward-list ten-gi-forward-list }
no port isolation
Parameter
fa-forward-list —— Configure Fast Ethernet ports to the forward port list. It is
optional.
gi-forward-list —— Configure Gigabit Ethernet ports to the forward port list. It is
optional.
ten-gi-forward-list —— Configure Gigabit Ethernet ports to the forward port list.
It is optional.
Command Mode
Interface Configuration Mode (interface fastEthernet / interface range
fastEthernet / interface gigabitEthernet / interface range gigabitEthernet /
interface ten-gigabitEthernet / interface range ten-gigabitEthernet)
Example
Set Gigabit Ethernet ports 1/0/15-17 to the forward port list of Gigabit Ethernet
1/0/8:
T3700G-28TQ(config)#interface range gigabitEthernet 1/0/8
T3700G-28TQ(config-if-range)#port isolation gi-forward-list 1/0/15-17
Set all the Ethernet ports to forward port list of Gigabit Ethernet port 1/0/2,
namely restore to the default setting:
T3700G-28TQ(config)#interface gigabitEthernet 1/0/2
190