06-Port Isolation Commands
Chapters Download (52.02 KB)
Syntax
display port-isolate group
View
Any view
Default Level
1: Monitor level
Parameters
None
Description
Use the display port-isolate group command to display information about the default isolation group 1
Examples
# Display information about the isolation group.
<Sysname> display port-isolate group
Port-isolate group information:
Uplink port support: NO
Group ID: 1
Group members:
GigabitEthernet1/1/1
Olt1/0/1
Table 1-1 display port-isolate group command output description
|
Field |
Description |
|
Port-isolate group information |
Display the information of a port-isolation group |
|
Uplink port support |
Indicates whether the uplink port is supported. |
|
Group ID |
Isolation group number |
|
Group members |
Isolated ports in the isolation group |
Syntax
port-isolate enable
undo port-isolate enable
View
Ethernet port view, Layer-2 aggregate interface view, port group view, OLT port view
Default Level
2: System level
Parameters
None
Description
Use the port-isolate enable command to add a port in Ethernet port/OLT port view or a group of ports in port group view to an isolation group as isolated ports.
Use the undo port-isolate enable command to remove the port or ports from the isolation group.
l In Ethernet port/OLT port view, the configuration applies to the current port.
l In port group view, the configuration applies to all ports in the port group.
l In Layer-2 aggregate interface view, the configuration applies to the Layer-2 aggregate interface and all its member ports. After you make the configuration, the system starts applying the configuration to the aggregate interface and its aggregation member ports. If the system fails to do that on the aggregate interface, it stops applying the configuration to the aggregation member ports. If it fails to do that on an aggregation member port, it simply skips the port and moves to the next port. For detailed information about Layer-2 aggregate interfaces, refer to Link Aggregation Configuration in the Access Volume.
Note that: This command adds a port to the default isolation group (isolation group 1).
Examples
# Assign ports GigabitEthernet 1/1/1 and GigabitEthernet 1/1/3 to the isolation group.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/1/1
[Sysname-GigabitEthernet1/1/1] port-isolate enable
[Sysname-GigabitEthernet1/1/1] quit
[Sysname] interface gigabitethernet 1/1/2
[Sysname-GigabitEthernet1/1/2] port-isolate enable
# Assign ports OLT1/0/1 and OLT1/0/2 to the isolation group.
<Sysname> system-view
[Sysname] interface Olt 1/0/1
[Sysname-Olt1/0/1] port-isolate enable
[Sysname-Ethernet1/1] quit
[Sysname] interface Olt 1/0/2
[Sysname-Olt1/0/2] port-isolate enable
# Assign all the ports within port group aa to the isolation group.
<Sysname> system-view
[Sysname] port-group manual aa
[Sysname-port-group-manual-aa] group-member gigabitethernet 1/1/1
[Sysname-port-group-manual-aa] group-member gigabitethernet 1/1/3
[Sysname-port-group-manual-aa] port-isolate enable
# Assign Layer-2 aggregate interface Bridge-aggregation 1 and its member ports to the isolation group on a single-isolation-group device.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] quit
[Sysname] interface Gigabitethernet 1/1/1
[Sysname-GigabitEthernet1/1/1] port link-aggregation group 1
[Sysname-GigabitEthernet1/1/1] quit
[Sysname] interface Gigabitethernet 1/1/3
[Sysname-GigabitEthernet1/1/3] port link-aggregation group 1
[Sysname-GigabitEthernet1/1/3] quit
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] port-isolate enable
Syntax
onu port-isolate enable
undo onu port-isolate enable
View
ONU port view
Parameters
None
Description
Use the onu port-isolate enable command to isolate all UNI ports of the ONU.
Use the undo onu port-isolate enable command to disable UNI port isolation.
By default, UNI port isolation is disabled.
Examples
# Isolate all UNI ports attached to the ONU corresponding to ONU 1/0/1:1.
<Sysname> system-view
[Sysname] interface onu 1/0/1:1
[Sysname-Onu1/0/1:1] onu port-isolate enable
Syntax
uni uni-number port-isolate
undo uni uni-number port-isolate
View
ONU port view
Default Level
2: System level
Parameters
uni-number: UNI number, in the range 1 to the number of UNI ports of the current ONU. The number of UNIs can be up to 80.
Description
Use the uni port-isolate command to add a UNI to an isolation group.
Use the undo uni port-isolate command to remove a UNI from an isolation group.
Only one isolation group can be created on an ONU device.
By default, a UNI is not in any isolation group.
l This command takes effect on H3C ONUs only.
l A UNI port of an ET254-L ONU can be added to an isolation group only when the UNI port's VLAN operation mode is the transparent transmission mode.
Examples
# Add UNI 1 and UNI 2 to the isolation group.
<Sysname> system-view
[Sysname] interface onu 1/0/1:1
[Sysname-Onu1/0/1:1] uni 1 port-isolate
[Sysname-Onu1/0/1:1] uni 2 port-isolate
