H3C S5120-SI Series

1-1
1 Port Isolation Configuration
When configuring port isolation, go to these sections for information you are interested in:
z Introduction to Port Isolation
z Configuring an Isolation Group for a Multiple-Isolation-Group Device
z Displaying and Maintaining Isolation Groups
z Port Isolation Configuration Example
Introduction to Port Isolation
Usually, Layer 2 traffic isolation is achieved by assigning ports to different VLANs. To save VLAN
resources, port isolation is introduced to isolate ports within a VLAN, allowing for great flexibility and
security.
Currently:
z S5120-SI switch series support multiple isolation groups which can be configured manually. These
devices are referred to as multiple-isolation-group devices.
z There is no restriction on the number of ports assigned to an isolation group.
z Within the same VLAN, Layer 2 data transmission between ports within and outside the isolation
group is supported.
Configuring an Isolation Group for a Multiple-Isolation-Group
Device
Adding a Port to an Isolation Group
Follow these steps to configure an isolation group for a multiple-isolation-group device:
To do… Use the command… Remarks
Enter system view
system-view
—
Create an isolation group
port-isolate group group-number
Required
Enter
Ethernet
interface
view
interface interface-type
interface-number
Enter
Layer-2
aggregate
interface
view
interface bridge-aggregation
interface-number
Enter
interface
view, or port
group view
Enter port
group view
port-group manual
port-group-name
Required
Use one of the commands.
z In Ethernet interface view,
the subsequent
configurations apply to the
current port
z In Layer-2 aggregate
interface view, the
subsequent configurations
apply to the Layer-2
aggregate interface and all
its member ports.
z In port group view, the
subsequent configurations
apply to all ports in the port
group.