Figure 1-1 Networking diagram for configuring port isolation
Switch
PC1 PC2 PC3
GE1/0/3
GE1/0/2
GE1/0/1
10.10.10.1/24 10.10.10.2/24 10.10.10.3/24
 
Configuration Roadmap
The configuration roadmap is as follows:
1. Enable port isolation on the ports connected to PC1 and PC2 respectively to prevent PC1
and PC2 from communicating with each other.
Data Preparation
To complete the configuration, you need the following data:
l Number of the port connected to PC1
l Number of the port connected to PC2
l Port isolation mode: Layer 2 isolation and Layer 3 communication (default configuration)
l ID of the VLAN that the ports connected to PC1, PC2, and PC3 belong to (VLAN 1 by
default)
l Port isolation group that the ports connected to PC1 and PC2 belong to (group 1 by default)
Procedure
Step 1 Enable port isolation.
# Isolate ports on Layer 2 and allow them to communicate on Layer 3.
<Quidway> system-view
[Quidway] port-isolate mode l2
# Enable port isolation on GigabitEthernet 1/0/1.
<Quidway> system-view
[Quidway] interface gigabitethernet 1/0/1
[Quidway-GigabitEthernet1/0/1] port-isolate enable
[Quidway-GigabitEthernet1/0/1] quit
# Enable port isolation on GigabitEthernet 1/0/2.
<Quidway> system-view
[Quidway] interface gigabitethernet 1/0/2
Quidway S7700 Smart Routing Switch
Configuration Guide - Ethernet 1 Ethernet Interface Configuration
Issue 01 (2011-07-15) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
15