Port isolation configuration commands 1

display port-isolate group· 1

port-isolate enable· 2

display port-isolate group

Use display port-isolate group to display port isolation group information.

Syntax

display port-isolate group [ | { begin | exclude | include } regular-expression ]

Views

Any view

Default command level

1: Monitor level

Parameters

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

exclude: Displays all lines that do not match the specified regular expression.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Usage guidelines

This command displays information about the default isolation group (isolation group 1).

Examples

# Display port isolation group information.

<Sysname> display port-isolate group

Port-isolate group information:

 Uplink port support: NO

 Group ID: 1

 Group members:

GigabitEthernet1/0/2

Ten-GigabitEthernet1/0/29                                                  

Ten-GigabitEthernet1/0/30                                                  

Ten-GigabitEthernet1/0/31                                                   

Ten-GigabitEthernet1/0/32 

Table 1 Command output

port-isolate enable

Use port-isolate enable to assign a port to an isolation group.

Use undo port-isolate enable to remove a port from the isolation group.

Syntax

port-isolate enable

undo port-isolate enable

Views

Layer 2 Ethernet interface view, Layer 2 aggregate interface view, port group view

Default command level

2: System level

Usage guidelines

This command assigns a port to the default isolation group, called isolation group 1.

·           To assign Ethernet ports to the isolation group one by one, use the command in Layer 2 Ethernet interface view.

·           To bulk assign Ethernet ports to the isolation group, use the command in port group view.

·           To assign a Layer 2 aggregate interface to the isolation group, use the command in Layer 2 aggregate interface view. The configuration applies to the Layer 2 aggregate interface and all its member ports. If the device fails to apply the port-isolate enable command to a Layer 2 aggregate interface, it does not assign any member port of the aggregate interface to the isolation group. If the failure occurs on a member port, the device can still assign other member ports to the isolation group. For more information about Layer 2 aggregate interfaces, see "Ethernet link aggregation configuration commands."

You cannot assign the member ports of a service loopback group to an isolation group, and vice versa.

Examples

#Assign ports GigabitEthernet 1/0/1 and GigabitEthernet 1/0/2 to the isolation group.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] port-isolate enable

[Sysname-GigabitEthernet1/0/1] quit

[Sysname] interface gigabitethernet 1/0/2

[Sysname-GigabitEthernet1/0/2] port-isolate enable

# Assign all the ports in port group aa to the isolation group.

<Sysname> system-view

[Sysname] port-group manual aa

[Sysname-port-group-manual-aa] group-member gigabitethernet 1/0/1

[Sysname-port-group-manual-aa] group-member gigabitethernet 1/0/2

[Sysname-port-group-manual-aa] group-member gigabitethernet 1/0/3

[Sysname-port-group-manual-aa] group-member gigabitethernet 1/0/4

[Sysname-port-group-manual-aa] port-isolate enable

# Assign Layer 2 aggregate interface Bridge-Aggregation 1 to the isolation group.

<Sysname> system-view

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] quit

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] port link-aggregation group 1

[Sysname-GigabitEthernet1/0/1] quit

[Sysname] interface gigabitethernet 1/0/2

[Sysname-GigabitEthernet1/0/2] port link-aggregation group 1

[Sysname-GigabitEthernet1/0/2] quit

[Sysname] interface bridge-aggregation 1

[Sysname-Bridge-Aggregation1] port-isolate enable