178
Chapter 22 Port Isolation Commands
Port Isolation provides a method of restricting traffic flow to improve the network security by
forbidding the port to forward packets to the ports that are not on its forwarding port list.
22.1 port isolation
Description
The port isolation command is used to configure the forward port/LAG list of
a port/LAG, so that this port/LAG can only communicate with the ports/LAGs
on its list. To delete the corresponding configuration, please use no port
isolation command.
Syntax
port isolation { [ gi-forward-list
gi-forward-list
] [ po-forward-list
po-forward-list
] }
no port isolation
Parameter
gi-forward-list
—— The list of Ethernet ports.
po
-forward-list
—— The list of LAGs.
Command Mode
Interface Configuration Mode (interface gigabitEthernet / interface range
gigabitEthernet / interface port-channel / interface range port-channel)
Privilege Requirement
Only Admin and Operator level users have access to these commands.
Example
Set port 1, 2, 4 and LAG 2 to the forward list of port 1/0/5:
T1600G-52TS(config)# interface gigabitEthernet 1/0/5
T1600G-52TS(config-if)# port isolation gi-forward-list 1/0/1-2,1/0/4
po-forward-list 2
Set all Ethernet ports and LAGs to forward list of port 1/0/2, namely restore to
the default setting:
T1600G-52TS(config)# interface gigabitEthernet 1/0/2
T1600G-52TS(config-if)# no port isolation
To Next Page
Loading...
Need help?
General