H3C S5120-EI Series - Port Isolate-User-Vlan

175
Use the undo isolated-vlan enable command to restore the default.
By default, ports in the same secondary VLAN can communicate with one another at Layer 2.
• After you configure the isolated-vlan enable command in secondary VLAN view, you cannot assign
any port in the secondary VLAN to an isolation group. For more information about isolation groups,
see the Layer 2—LAN Switching Configuration Guide.
• Layer 2 isolation configured with the isolated-vlan enable command takes effect only after the
secondary VLAN is associated with an isolate-user-VLAN.
Examples
# Configure Layer 2 isolation between ports in secondary VLAN 4.
<Sysname> system-view
[Sysname] vlan 2
[Sysname-vlan2] isolate-user-vlan enable
[Sysname-vlan2] port gigabitethernet 1/0/2
[Sysname-vlan2] vlan 3
[Sysname-vlan3] port gigabitethernet 1/0/3
[Sysname-vlan3] vlan 4
[Sysname-vlan4] port gigabitethernet 1/0/4
[Sysname-vlan4] quit
[Sysname] isolate-user-vlan 2 secondary 3 to 4
[Sysname] vlan 4
[Sysname-vlan4] isolated-vlan enable
port isolate-user-vlan
Syntax
port isolate-user-vlan { host | promiscuous }
undo port isolate-user-vlan
View
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Default level
2: System level
Parameters
host: Configures the port as a downstream port.
promiscuous: Configures the port as an upstream port.
Description
Use the port isolate-user-vlan command to configure the isolate-user-VLAN type of a port.
Use the undo port isolate-user-vlan command to restore the default setting.
By default, no isolate-user-VLAN type is configured for a port.
Related commands: isolate-user-vlan.
Examples
# Configure the access port GigabitEthernet 1/0/1 as a downstream port.
<Sysname> system-view