Contents

Port isolation commands· 1

display port-isolate group· 1

port-isolate enable· 2

port-isolate group· 2

Port isolation commands

display port-isolate group

Use display port-isolate group to display port isolation group information.

Syntax

display port-isolate group [ group-id ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

group-id: Specifies an isolation group by its ID. The value range is 1 to 8.

Examples

# Display all isolation groups.

<Sysname> display port-isolate group

 Port isolation group information:

 Group ID: 1

 Group members:

    GigabitEthernet1/0/1

 

 Group ID: 5

 Group members:

    GigabitEthernet1/0/2            GigabitEthernet1/0/4

# Display information about isolation group 1.

<Sysname> display port-isolate group 1

 Port isolation group information:

 Group ID: 1

 Group members:

    GigabitEthernet1/0/1

Table 1 Command output

Field	Description
Group ID	ID of the isolation group.
Group members	Isolated ports in the isolation group. No ports indicates that the isolation group contains no isolated ports.

 

Related commands

port-isolate enable

port-isolate enable

Use port-isolate enable to assign a port to an isolation group.

Use undo port-isolate enable to remove a port from an isolation group.

Syntax

port-isolate enable group group-id

undo port-isolate enable

Default

The port is not assigned to any isolation group.

Views

Layer 2 Ethernet interface view

Layer 2 aggregate interface view

Predefined user roles

network-admin

Parameters

group group-id: Specifies an isolation group by its ID. The value range is 1 to 8.

Usage guidelines

The configuration in Layer 2 Ethernet interface view applies only to the interface.

The configuration in Layer 2 aggregate interface view applies to the Layer 2 aggregate interface and its aggregation member ports. If the device fails to apply the configuration to the aggregate interface, it does not assign any aggregation member port to the isolation group. If the failure occurs on an aggregation member port, the device skips the port and continues to assign other aggregation member ports to the isolation group.

You cannot assign the member ports of a service loopback group to an isolation group, and vice versa.

To assign ports to an isolation group, make sure the isolation group already exists.

One port can be assigned to only one isolation group.

Examples

# Assign GigabitEthernet 1/0/1 and GigabitEthernet 1/0/2 to isolation group 1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] port-isolate enable group 1

[Sysname-GigabitEthernet1/0/1] quit

[Sysname] interface gigabitethernet 1/0/2

[Sysname-GigabitEthernet1/0/2] port-isolate enable group 1

Related commands

display port-isolate group

port-isolate group

Use port-isolate group to create an isolation group.

Use undo port-isolate group to delete isolation groups.

Syntax

port-isolate group group-id

undo port-isolate group { group-id | all }

Default

No isolation groups exist.

Views

System view

Predefined user roles

network-admin

Parameters

group-id: Specifies an isolation group by its ID. The value range is 1 to 8.

all: Deletes all isolation groups.

Examples

# Create isolation group 1.

<Sysname> system-view

[Sysname] port-isolate group 1