Table of Contents

1 Port Isolation Configuration Commands· 1-1

Port Isolation Configuration Commands· 1-1

display port-isolate group· 1-1

port-isolate enable· 1-2

Port Isolation Configuration Commands

display port-isolate group

Syntax

display port-isolate group

View

Any view

Default Level

1: Monitor level

Parameters

None

Description

Use the display port-isolate group command to display information about the default isolation group (isolation group 1).

Examples

# On a single-isolation-group device, display information about the isolation group.

<Sysname> display port-isolate group

 Port-isolate group information:

 Uplink port support: NO

 Group ID: 1

    Ethernet2/0/4            Ethernet2/0/5

Table 1-1 display port-isolate group command output description

port-isolate enable

Syntax

port-isolate enable

undo port-isolate enable

View

Ethernet interface view, Layer-2 aggregate interface view, port group view

Default Level

2: System level

Parameters

group group-number: Specifies the ID of the group to which the ports are to be added. The value range varies with devices.

Description

Use the port-isolate enable command to add a port in Ethernet interface view or a group of ports in port group view to an isolation group as isolated ports.

Use the undo port-isolate enable command to remove the port or ports from the isolation group.

l          In Ethernet interface view, the configuration applies to the current port.

l          In port group view, the configuration applies to all ports in the port group.

l          In Layer-2 aggregate interface view, the configuration applies to the Layer-2 aggregate interface and all its member ports. After you make the configuration, the system starts applying the configuration to the aggregate interface and its aggregation member ports. If the system fails to do that on the aggregate interface, it stops applying the configuration to the aggregation member ports. If it fails to do that on an aggregation member port, it simply skips the port and moves to the next port.  For detailed information about Layer-2 aggregate interfaces, refer to Link Aggregation Configuration in the Access Volume.

Note that: This command adds a port to the default isolation group (isolation group 1).

Examples

# Assign ports Ethernet 2/0/1 to the isolation group.

<Sysname> system-view

[Sysname] interface ethernet 2/0/1

[Sysname-Ethernet2/0/1] port-isolate enable

# Assign all the ports within port group aa to the isolation group.

<Sysname> system-view

[Sysname] port-group manual aa

[Sysname-port-group-manual-aa] group-member ethernet 2/0/2

[Sysname-port-group-manual-aa] group-member ethernet 2/0/3

[Sysname-port-group-manual-aa] group-member ethernet 2/0/4

[Sysname-port-group-manual-aa] port-isolate enable

# Assign Layer-2 aggregate interface Bridge-aggregation 1 and its member ports to the isolation group.

<Sysname> system-view

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] quit

[Sysname] interface Ethernet 2/0/1

[Sysname-Ethernet2/0/1] port link-aggregation group 1

[Sysname-Ethernet2/0/1] quit

[Sysname] interface Ethernet 2/0/2

[Sysname-Ethernet2/0/2] port link-aggregation group 1

[Sysname-Ethernet2/0/2] quit

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] port-isolate enable