H3C S5100-SI

1-1
1 Port Isolation Configuration
When configuring port isolation, go to these sections for information you are interested in:
z Port Isolation Overview
z Port Isolation Configuration
z Displaying and Maintaining Port Isolation Configuration
z Port Isolation Configuration Example
Port Isolation Overview
With the port isolation feature, you can add the ports to be controlled into an isolation group to isolate
the Layer 2 and Layer 3 data between each port in the isolation group. Thus, you can construct your
network in a more flexible way and improve your network security.
Currently, you can create only one isolation group on an S5100SI/EI Series Ethernet switch. The
number of Ethernet ports in an isolation group is not limited.
An isolation group only isolates the member ports in it.
Port Isolation Configuration
You can perform the following operations to add an Ethernet port to an isolation group, thus isolating
Layer 2 and Layer 3 data among the ports in the isolation group.
Follow these steps to configure port isolation:
To do … Use the command … Remarks
Enter system view
system-view
—
Enter Ethernet port view
interface interface-type
interface-number
—
Add the Ethernet port to the
isolation group
port isolate
Required
By default, an isolation group
contains no port.