Contents

Port isolation commands· 1

display port-isolate group· 1

port-isolate enable· 1

Port isolation commands

This feature is not supported on Ethernet switching modules SIC-4FSW or SIC-4FSW-PoE.

display port-isolate group

Use display port-isolate group to display port isolation group information.

Syntax

display port-isolate group

Views

Any view

Predefined user roles

network-admin

network-operator

Examples

# Display port isolation group information.

<Sysname> display port-isolate group

 Port isolation group information:

 Group ID: 1

 Group members:

    GigabitEthernet1/0/2

 Community VLAN ID: 3

Table 1 Command output

Related commands

port-isolate enable

port-isolate enable

Use port-isolate enable to assign a port to an isolation group.

Use undo port-isolate enable to remove a port from an isolation group.

Syntax

port-isolate enable

undo port-isolate enable

Default

The port is not assigned to an isolation group.

Views

Layer 2 Ethernet interface view

Layer 2 aggregate interface view

Predefined user roles

network-admin

Usage guidelines

The configuration in Layer 2 Ethernet interface view applies only to the interface.

The configuration in Layer 2 aggregate interface view applies to the Layer 2 aggregate interface and its aggregation member ports. If the device fails to apply the configuration to the aggregate interface, it does not assign any aggregation member port to the isolation group. If the failure occurs on an aggregation member port, the device skips the port and continues to assign other aggregation member ports to the isolation group.

This command assigns a port to the default isolation group (isolation group 1). (Applicable to devices that support only one isolation group.)

Examples

# Assign GigabitEthernet 1/0/1 and GigabitEthernet 1/0/2 to the default isolation group.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] port-isolate enable

[Sysname-GigabitEthernet1/0/1] quit

[Sysname] interface gigabitethernet 1/0/2

[Sysname-GigabitEthernet1/0/2] port-isolate enable

# Assign Layer 2 aggregate interface Bridge-Aggregation 1 to the default isolation group.

<Sysname> system-view

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] quit

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] port link-aggregation group 1

[Sysname-GigabitEthernet1/0/1] quit

[Sysname] interface gigabitethernet 1/0/2

[Sysname-GigabitEthernet1/0/2] port link-aggregation group 1

[Sysname-GigabitEthernet1/0/2] quit

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] port-isolate enable

Related commands

display port-isolate group