52
Displaying and maintaining isolation groups
Display information about the isolation group
display port-isolate group [ | {
begin | exclude | include }
regular-expression ]
Port isolation configuration example
Network requirements
As shown in Figure 14:
Hosts A, B, and C are connected to port GigabitEthernet 1/0/1, GigabitEthernet 1/0/2, and
GigabitEthernet 1/0/3 of Device.
Device is connected to the Internet through GigabitEthernet 1/0/4.
GigabitEthernet 1/0/1, GigabitEthernet 1/0/2, GigabitEthernet 1/0/3, and GigabitEthernet
1/0/4 belong to the same VLAN.
Configure Device to enable Host A, Host B, and Host C to access the Internet when they are isolated from
one another.
Figure 14 Network diagram for port isolation configuration
Internet
Host A Host B Host C
GE1/0/2
GE1/0/1
GE1/0/3
Device
GE1/0/4
Configuration procedure
# Assign ports GigabitEthernet 1/0/1, GigabitEthernet 1/0/2, and GigabitEthernet 1/0/3 to isolation
group 1.
<Device> system-view
[Device] interface gigabitethernet 1/0/1
[Device-GigabitEthernet1/0/1] port-isolate enable
[Device-GigabitEthernet1/0/1] quit
[Device] interface gigabitethernet 1/0/2
[Device-GigabitEthernet1/0/2] port-isolate enable
[Device-GigabitEthernet1/0/2] quit
[Device] interface gigabitethernet 1/0/3