Chapter 8
| General Security Measures
Port Isolation
– 312 –
Example
Console(config)#port-isolation join profile 1 bridge ipv4 dhcp
Console(config)#
port-isolation profile This command sets the traffic type or protocol type to include in a profile. Use the
no form to remove a profile or to remove an attribute from a profile.
Syntax
port-isolation profile profile-id bridge {ipv4 {arp | dhcp} | ipv6 {ndp | dhcp} |
traffic {broadcast | multicast | unitcast}}
no port-isolation profile profile-id [ipv4 {arp | dhcp} | ipv6 {ndp | dhcp} |
traffic {broadcast | multicast | unitcast}]
profile-id - Profile identifier. (Range: 1-20)
Default Setting
None
Command Mode
Global Configuration
Command Usage
â—† An isolation profile can include any number of traffic types or protocol types.
Separate commands are required to enter each attribute.
â—† An isolation profile must be assigned to an uplink or downlink port using the
port-isolation join command before it will take effect.
Example
Console(config)#port-isolation profile 1 bridge ipv4 dhcp
Console(config)#
show port-isolation This command displays configured profiles and port assignments.
Command Mode
Privileged Exec
Example
Console#show port-isolation
Port Isolation System Status: Enable
Profile ID : 1
Traffic :
IPv4 : DHCP
IPv6 :
Uplink Port : Eth1/ 4
Isolated Port : Eth1/ 3 Eth1/ 9 Eth1/10