Chapter 8
| General Security Measures
Port Isolation
– 311 –
Example
Console(config)#port-isolation
Console(config)#
port-isolation join This command assigns a profile to an uplink or downlink port. Use the no form to
remove a profile assignment.
Syntax
[no] port-isolation join profile-id {{isolated interface} | {uplink interface}}
profile-id - Profile identifier. (Range: 1-26)
interface
ethernet unit/port-list
unit - Unit identifier. (Range: 1)
port-list – One or more ports. Use a hyphen to indicate a
consecutive list of ports or a comma between non-consecutive
ports. (Range: 1-12/28)
Default Setting
None
Command Mode
Global Configuration
Command Usage
â—† When a profile is assigned to a downlink port (i.e., isolated port),
traffic matching any of the defined attributes (entering the switch through that
port) can only be passed to an uplink port which has been assigned the same
profile.
â—† Only one profile can be assigned to a downlink port, but one or more profiles
can be assigned to an uplink port. This allows a downlink port to pass any traffic
defined in its profile to all uplink ports which share the same profile. This also
allows an uplink port to service any number of downlink ports which share the
same profile.
â—† When an uplink port is assigned more than one profile, traffic entering the
switch through the uplink port must be checked against all of its assigned
profiles to determine the downlink port to which that traffic can be forwarded.
â—† When a profile is assigned to a port, any traffic attributes not defined in the
profile are subject normal switching rules.
To Next Page
Loading...
Need help?
General
