Operation Manual

Configuration Guide 98
Managing Physical Interfaces Configuration Examples
7.2 Example for Port Isolation
7.2.1 Network Requirements
As shown below, three hosts and a server are connected to the switch and all belong to
VLAN 10. With the VLAN configuration unchanged, Host A is not allowed to communicate
with the other hosts except the server, even if the MAC address or IP address of Host A is
changed.
Figure 7-5 Network Topology
VLAN 10
Switch
Te1/0/1
Te1/0/2
Te1/0/4
Te1/0/3
Host A
Host B Host C Server
7.2.2 Configuration Scheme
You can configure port isolation to implement the requirement. Set 1/0/4 as the only
forwarding port for port 1/0/1, thus forbidding Host A to forward packets to the other
hosts.
Demonstrated with T1700X-16TS, the following sections provide configuration procedure
in two ways: using the GUI and using the CLI.
7.2.3 Using the GUI
1) Choose the menu Switching > Port > Port Isolation to load the following page. It
displays the port isolation list.