- Table of Contents
-
- 04-Network Connectivity
- 00-Preface
- 01-MAC address table commands
- 02-Ethernet link aggregation commands
- 03-Port isolation commands
- 04-VLAN commands
- 05-Loop detection commands
- 06-Spanning tree commands
- 07-LLDP commands
- 08-Layer 2 forwarding commands
- 09-ARP commands
- 10-IP addressing commands
- 11-DHCP commands
- 12-DHCPv6 commands
- 13-DNS commands
- 14-IP performance optimization commands
- 15-IPv6 basics commands
- 16-Basic IP routing commands
- 17-Static routing commands
- 18-IPv6 static routing commands
- 19-IGMP snooping commands
- 20-MLD snooping commands
- Related Documents
-
Title | Size | Download |
---|---|---|
03-Port isolation commands | 43.39 KB |
Port isolation commands
display port-isolate group
Use display port-isolate group to display port isolation group information.
Syntax
Devices that support only one isolation group:
display port-isolate group
Devices that support multiple isolation groups:
display port-isolate group [ group-id ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
group-id: Specifies an isolation group by its ID. The value range varies by device model.
Examples
# Display port isolation group information.
<Sysname> display port-isolate group
Port isolation group information:
Group ID: 1
Group members:
GigabitEthernet1/0/2
Community VLAN ID: 3
# Display all isolation groups.
<Sysname> display port-isolate group
Port isolation group information:
Group ID: 1
Group members:
GigabitEthernet1/0/1
Group ID: 5
Group members:
GigabitEthernet1/0/2 GigabitEthernet1/0/4
Community VLAN ID: 3
# Display information about isolation group 1.
<Sysname> display port-isolate group 1
Port isolation group information:
Group ID: 1
Group members:
GigabitEthernet1/0/1
Community VLAN ID: 1(default), 2
Table 1 Command output
Field |
Description |
Group ID |
ID of the isolation group. |
Group members |
Isolated ports in the isolation group. No ports indicates that the isolation group does not contain isolated ports. |
Community VLAN ID |
IDs of the community VLANs in the isolation group. The (default) attribute indicates that the VLAN is the default VLAN. None indicates that the isolation group does not contain community VLANs. |
Related commands
port-isolate enable
port-isolate enable
Use port-isolate enable to assign a port to an isolation group.
Use undo port-isolate enable to remove a port from an isolation group.
Syntax
port-isolate enable
undo port-isolate enable
Default
The port is not assigned to an isolation group.
Views
Layer 2 Ethernet interface view
Layer 2 aggregate interface view
Predefined user roles
network-admin
Usage guidelines
The configuration in Layer 2 Ethernet interface view applies only to the interface.
The configuration in Layer 2 aggregate interface view applies to the Layer 2 aggregate interface and its aggregation member ports. If the device fails to apply the configuration to the aggregate interface, it does not assign any aggregation member port to the isolation group. If the failure occurs on an aggregation member port, the device skips the port and continues to assign other aggregation member ports to the isolation group.
You cannot assign the member ports of a service loopback group to an isolation group, and vice versa.
This command assigns a port to the default isolation group (isolation group 1). (Applicable to devices that support only one isolation group.)
Examples
# Assign GigabitEthernet 1/0/1 and GigabitEthernet 1/0/2 to the default isolation group.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port-isolate enable
[Sysname-GigabitEthernet1/0/1] quit
[Sysname] interface gigabitethernet 1/0/2
[Sysname-GigabitEthernet1/0/2] port-isolate enable
# Assign Layer 2 aggregate interface Bridge-Aggregation 1 to the default isolation group.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] quit
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port link-aggregation group 1
[Sysname-GigabitEthernet1/0/1] quit
[Sysname] interface gigabitethernet 1/0/2
[Sysname-GigabitEthernet1/0/2] port link-aggregation group 1
[Sysname-GigabitEthernet1/0/2] quit
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] port-isolate enable
Related commands
display port-isolate group