User's Manual

8-1
Chapter 8 Port Isolation Function
Configuration
8.1 Introduction to Port Isolation Function
Port isolation is an independent port-based function working in an inter-port way, which isolates flows of
different ports from each other. With the help of port isolation, users can isolate ports within a VLAN to save
VLAN resources and enhance network security. After this function is configured, the ports in a port isolation
group will be isolated from each other, while ports belonging to different isolation groups or no such group can
forward data to one another normally. No more than 16 port isolation groups can a switch have.
8.2 Task Sequence of Port Isolation
1. Create an isolate port group
2. Add Ethernet ports into the group
3. Specify the flow to be isolated
4. Display the configuration of port isolation
1. Create an isolate port group
Command
Explanation
Global Mode
isolate-port group <WORD>
no isolate-port group <WORD>
Set a port isolation group; the no operation of
this command will delete the port isolation
group.
2. Add Ethernet ports into the group
Command
Explanation
Global Mode
isolate-port group <WORD> switchport
interface [ethernet | port-channel]
<IFNAME>
no isolate-port group <WORD>
switchport interface [ethernet |
port-channel] <IFNAME>
Add one port or a group of ports into a port
isolation group to isolate, which will become
isolated from the other ports in the group; the
no operation of this command will remove one
port or a group of ports out of a port isolation
group.