03-Port Isolation Commands
Chapters Download (54.67 KB)
Syntax
display port-isolate group
View
Any view
Default Level
1: Monitor level
Parameters
None
Description
Use the display port-isolate group command to display information about the default isolation group (isolation group 1).
Examples
# Display information about the isolation group.
<Sysname> display port-isolate group
Port-isolate group information:
Uplink port support: YES
Group ID: 1
Uplink port: GigabitEthernet1/0/3
Group members:
GigabitEthernet1/0/2
Table 1-1 display port-isolate group command output description
|
Field |
Description |
|
Port-isolate group information |
Display the information of a port-isolation group |
|
Uplink port support |
Indicates whether the uplink port is supported. |
|
Group ID |
Isolation group number |
|
Uplink port |
The uplink port in the isolation group |
|
Group members |
Isolated ports (non-uplink ports) in the isolation group |
Syntax
port-isolate enable
undo port-isolate enable
View
Ethernet interface view, Layer-2 aggregate interface view, port group view
Default Level
2: System level
Parameters
None
Description
Use the port-isolate enable command to add a port in Ethernet interface view or a group of ports in port group view to an isolation group 1 as isolated ports.
Use the undo port-isolate enable command to remove the port or ports from the isolation group 1.
l In Ethernet interface view, the configuration applies to the current port.
l In port group view, the configuration applies to all ports in the port group.
l In Layer-2 aggregate interface view, the configuration applies to the Layer-2 aggregate interface and all its member ports. After you make the configuration, the system starts applying the configuration to the aggregate interface and its aggregation member ports. If the system fails to do that on the aggregate interface, it stops applying the configuration to the aggregation member ports. If it fails to do that on an aggregation member port, it simply skips the port and moves to the next port. For detailed information about Layer-2 aggregate interfaces, refer to Link Aggregation Configuration in the Access Volume.
You cannot configure an isolated port in an aggregation group as the uplink port in any isolation group.
Examples
# Assign ports GigabitEthernet1/0/1 and GigabitEthernet1/0/2 to the isolation group 1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port-isolate enable
[Sysname-GigabitEthernet1/0/1] quit
[Sysname] interface gigabitethernet 1/0/2
[Sysname-GigabitEthernet1/0/2] port-isolate enable
# Assign all the ports within port group aa to the isolation group 1.
<Sysname> system-view
[Sysname] port-group manual aa
[Sysname-port-group-manual-aa] group-member gigabitethernet 1/0/1
[Sysname-port-group-manual-aa] group-member gigabitethernet 1/0/2
[Sysname-port-group-manual-aa] group-member gigabitethernet 1/0/3
[Sysname-port-group-manual-aa] group-member gigabitethernet 1/0/4
[Sysname-port-group-manual-aa] port-isolate enable
# Assign Layer-2 aggregate interface Bridge-aggregation 1 and its member ports to the isolation group 1.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] quit
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port link-aggregation group 1
[Sysname-GigabitEthernet1/0/1] quit
[Sysname] interface gigabitethernet 1/0/2
[Sysname-GigabitEthernet1/0/2] port link-aggregation group 1
[Sysname-GigabitEthernet1/0/2] quit
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] port-isolate enable
Syntax
port-isolate uplink-port
undo port-isolate uplink-port
View
Ethernet interface view, Layer-2 aggregate interface view
Default Level
2: System level
Parameters
None
Description
Use the port-isolate uplink-port command to configure the specified port as the uplink port in the isolation group 1.
Use the undo port-isolate uplink-port command to remove the uplink port in the isolation group 1.
l In Ethernet interface view, the configuration applies to the current port.
l In Layer-2 aggregate interface view, the configuration applies to the Layer-2 aggregate interface and all its member ports. After you make the configuration, the system starts applying the configuration to the aggregate interface and its aggregation member ports. If the system fails to do that on the aggregate interface, it stops applying the configuration to the aggregation member ports. If it fails to do that on an aggregation member port, it simply skips the port and moves to the next port. For detailed information about Layer-2 aggregate interfaces, refer to Link Aggregation Configuration in the Access Volume.
l You cannot configure an isolated port in an aggregation group as the uplink port in any isolation group.
l The member port of an aggregation group cannot be configured as the uplink port of an isolation group and vice versa. If you assign a port to an aggregation group and to an isolation group as the uplink port at the same time, the aggregation group configuration will take effect and the isolation group configuration will be removed for backward configuration file compatibility. For detailed information about link aggregation, refer to Link Aggregation Configuration in the Access Volume.
Examples
# Specify the uplink port for the isolation group 1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port-isolate uplink-port
# Configure Layer-2 aggregate interface Bridge-aggregation 1 as the uplink port of the isolation group 1.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] port-isolate uplink-port
