Port isolation configuration commands 1

community-vlan vlan· 1

display port-isolate group· 1

port-isolate enable· 2

port-isolate group· 3

 

community-vlan vlan

Syntax

community-vlan vlan { vlan-id-list | all }

undo community-vlan

View

Isolation group view

Default level

2: System level

Parameters

vlan-id-list: Specifies a list of VLANs in the format of { vlan-id1 [ to vlan-id2 ] }&<1-10>, where vlan-id is in the range of 1 to 4094 with vlan-id1 no smaller than vlan-id2, and &<1-10> indicates that you can specify up to ten vlan-id1 [ to vlan-id2 ] options.

all: Configures all VLANs in the isolation group as community VLANs.

Description

Use community-vlan vlan to configure community VLANs in an isolation group.

Use undo community-vlan to remove all community VLANs from an isolation group.

By default, an isolation group does not contain any community VLANs.

You cannot repeatedly configure the community-vlan vlan command. To update the community VLANs in an isolation group, you must use the undo community-vlan vlan command first.

Examples

# Configure VLAN 3 as a community VLAN in isolation group 1.

<Sysname> system-view

[Sysname] port-isolate group 1

[Sysname-port-isolate-group1] community-vlan vlan 3

# Remove all community VLANs from isolation group 2.

<Sysname> system-view

[Sysname] port-isolate group 2

[Sysname-port-isolate-group2] undo community-vlan

display port-isolate group

Syntax

display port-isolate group [ group-number ] [ | { begin | exclude | include } regular-expression ]

View

Any view

Default level

1: Monitor level

Parameters

group-number: Specifies an isolation group number. The value range is 1 to 16 in standalone mode and 1 to 4 in IRF mode.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Description

Use display port-isolate group to display port isolation group information.

If no isolation group is specified, this command displays information about all isolation groups.

Examples

# Display information about all isolation groups.

<Sysname> display port-isolate group

 Port-isolate group information:

 Uplink port support: NO

 Group ID: 2

 Group members:

    GigabitEthernet4/0/1

Table 1 Command output

Field	Description
Port-isolate group information	Port isolation group information.
Uplink port support	Indicates whether the uplink port is supported.
Group ID	Isolation group number.
Group members	Isolated ports in the isolation group.

 

port-isolate enable

Syntax

port-isolate enable group group-number

undo port-isolate enable

View

Layer 2 Ethernet interface view, Layer 2 aggregate interface view, port group view

Default level

2: System level

Parameters

group group-number: Specifies an isolation group by its number. The value range is 1 to 16 in standalone mode and 1 to 4 in IRF mode.

Description

Use port-isolate enable to assign a port to an isolation group.

Use undo port-isolate enable to remove a port from the isolation group.

Before assigning a port to an isolation group, create the isolation group with the port-isolate group command first.

The number of ports that can be assigned to an isolation group is not limited.

To assign Ethernet ports to the isolation group one by one, perform the command in Layer 2 Ethernet interface view.

To bulk assign Ethernet ports to the isolation group, perform the command in port group view.

To assign a Layer 2 aggregate interface to the isolation group, perform the command in Layer 2 aggregate interface view. The configuration applies to the Layer 2 aggregate interface and all its member ports. If the device fails to apply the port-isolate enable command to a Layer 2 aggregate interface, it does not assign any member port of the aggregate interface to the isolation group. If the failure occurs on a member port, the device can still assign other member ports to the isolation group. For more information about Layer 2 aggregate interfaces, see Layer 2—LAN Switching Configuration Guide.

Examples

# Assign ports GigabitEthernet 4/0/1 to isolation group 2.

<Sysname> system-view

[Sysname] interface GigabitEthernet 4/0/1

[Sysname-GigabitEthernet4/0/1] port-isolate enable group 2

port-isolate group

Syntax

port-isolate group group-number

undo port-isolate group { group-number | all }

View

System view

Default level

2: System level

Parameters

group-number: Specifies the isolation group number. The value range is 1 to 16 in standalone mode and 1 to 4 in IRF mode.

all: Deletes all isolation groups.

Description

Use port-isolate group to create an isolation group and enter isolation group view.

Use undo port isolate group to delete one or all isolation groups.

Examples

# Create isolation group 2.

<Sysname> system-view

[Sysname] port-isolate group 2