Port isolation configuration commands 1

display port-isolate group· 1

port-isolate enable· 2

port-isolate group· 3

port-isolate uplink-port 4

 

display port-isolate group

Syntax

display port-isolate group [ group-number ] [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

group-number: Specifies an isolation group number. The group number ranges from 1 to 16 when the router works in hybrid or SPC mode, and 1 to 64 when the router works in SPE mode.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use the display port-isolate group command to display information about an isolation group.

If an isolation group is specified, this command displays information about the specified isolation group. If no isolation group is specified, the command displays information about all isolation groups.

Examples

# Display information about all isolation groups.

<Sysname> display port-isolate group

 Port-isolate group information:

 Uplink port support: YES

 Group ID: 2

 Uplink port: GigabitEthernet4/1/7

 Group members:

    GigabitEthernet4/1/1

 

 Group ID: 5

 Uplink port: GigabitEthernet4/1/3

 Group members:

    GigabitEthernet4/1/2            GigabitEthernet4/1/4 

# Display information about isolation group 2.

<Sysname> display port-isolate group 2

 Port-isolate group information:

 Uplink port support: YES

 Group ID: 2

 Uplink port: GigabitEthernet4/1/7

 Group members:

    GigabitEthernet4/1/1

Table 1 Output description

Field	Description
Port-isolate group information	Display the information of a port-isolation group
Uplink port support	Indicates whether the uplink port is supported.
Group ID	Isolation group number
Uplink port	The uplink port in the isolation group (displayed only when the uplink port is already configured)
Group members	Isolated ports (non-uplink ports) in the isolation group

 

port-isolate enable

Syntax

port-isolate enable group group-number

undo port-isolate enable

View

Layer 2 Ethernet interface view, Layer 2 aggregate interface, port group view

Default level

2: System level

Parameters

group group-number: Specifies the ID of the group to which the port or ports are to be added. The group number ranges from 1 to 16 when the router works in hybrid or SPC mode, and 1 to 64 when the router works in SPE mode.

Description

Use the port-isolate enable command to add a port or a group of ports to an isolation group as isolated ports.

Use the undo port-isolate enable command to remove the port or ports from the isolation group.

Before adding a port to an isolation group, create the isolation group first.

For more information about port groups, see Interface Configuration Guide.

 

NOTE: ·       You can add a port to multiple isolation groups as an isolated port. However, you cannot configure an isolated port in an aggregation group as the uplink port in any isolation group. ·       Configurations made in Layer 2 Ethernet interface view apply only to the interface. ·       Configurations made in port group view apply to all member ports in the group. ·       After you configure a command on a Layer 2 aggregate interface, the system starts applying the configuration to the aggregate interface and its aggregation member ports. If the system fails to do that on the aggregate interface, it stops applying the configuration to the aggregation member ports. If it fails to do that on an aggregation member port, it simply skips the port and moves to the next port. For more information about Layer 2 aggregate interfaces, see Layer 2—LAN Switching Configuration Guide.

 

Examples

# Assign GigabitEthernet 3/1/2 to isolation group 2.

<Sysname> system-view

[Sysname] port-isolate group 2

[Sysname] interface GigabitEthernet 3/1/2

[Sysname-GigabitEthernet3/1/2] port-isolate enable group 2

# Assign Layer 2 aggregate interface Bridge-aggregation 1 and its member ports to isolation group 2.

<Sysname> system-view

[Sysname] interface Bridge-Aggregation 1

[Sysname-Bridge-Aggregation1] quit

[Sysname] interface GigabitEthernet 3/1/1

[Sysname-GigabitEthernet3/1/1] port link-aggregation group 1

[Sysname-GigabitEthernet3/1/1] quit

[Sysname] interface GigabitEthernet 3/1/2

[Sysname-GigabitEthernet3/1/2] port link-aggregation group 1

[Sysname-GigabitEthernet3/1/2] quit

[Sysname] interface Bridge-Aggregation 1

[Sysname-Bridge-Aggregation1] port-isolate enable group 2

port-isolate group

Syntax

port-isolate group group-number

undo port-isolate group { group-number | all }

View

System view

Default level

2: System level

Parameters

group-number: Specifies the number of the isolation group. The group number ranges from 1 to 16 when the router works in hybrid or SPC mode, and 1 to 64 when the router works in SPE mode.

all: Deletes all isolation groups.

Description

Use the port-isolate group command to create an isolation group.

Use the undo port-isolate group command to delete one or all isolation groups.

Before you can add a port to an isolation group, create the group first.

Examples

# Create isolation group 2.

<Sysname> system-view

[Sysname] port-isolate group 2

port-isolate uplink-port

Syntax

port-isolate uplink-port group group-number

undo port-isolate uplink-port

View

Ethernet interface view, Layer 2 aggregate interface

Default level

2: System level

Parameters

group-number: Specifies an isolation group number. The group number ranges from 1 to 16 when the router works in hybrid or SPC mode, and 1 to 64 when the router works in SPE mode.

Description

Use the port-isolate uplink-port command to configure the specified port as the uplink port of the isolation group.

Use the undo port-isolate uplink-port command to remove the uplink port of the isolation group.

After you assign a Layer 2 aggregate interface as the uplink port of an isolation group, you can still assign its member port as isolated ports. However, these ports will be placed in unselected state and thus cannot receive or forward data packets. For more information about Layer 2 aggregate interfaces, see Layer 2—LAN Switching Configuration Guide.

 

IMPORTANT: ·       Before assigning a port to an isolation group, create the group first. ·       You can assign a port to multiple isolation groups as an isolated port. However, you cannot configure an isolated port in an aggregation group as the uplink port in any isolation group. ·       You cannot configure a link aggregation member port as the uplink port of an isolation group neither can you assign the uplink port of an isolation group to a link aggregation group. If a port is configured as a link aggregation member port and the uplink port of an isolation group at the same time, which is allowed with some old version software, the link aggregation group configuration will take effect while the port group configuration is removed for better compatibility after you upgrade the configuration file.

 

Examples

# Configure GigabitEthernet 3/1/1 as the uplink port of isolation group 2.

<Sysname> system-view

[Sysname] port-isolate group 2

[Sysname] interface GigabitEthernet 3/1/1

[Sysname-GigabitEthernet3/1/1] port-isolate uplink-port group 2

# Configure Layer 2 aggregate interface Bridge-Aggregation 1 as the uplink port of isolation group 2.

<Sysname> system-view

[Sysname] interface Bridge-Aggregation 1

[Sysname-Bridge-Aggregation1] port-isolate uplink-port group 2