3com 8807 Betriebsanweisung
15
P
ORT
I
SOLATION
C
ONFIGURATION
Port Isolation
Overview
Overview
Using the port isolation feature, you can place different user ports into the same
VLAN. As these users cannot communicate with each other, network security
improved, a flexible networking scheme is provided, and VLAN resources are
conserved.
VLAN. As these users cannot communicate with each other, network security
improved, a flexible networking scheme is provided, and VLAN resources are
conserved.
Configuration Tasks
n
Layer 3 interfaces should not be configured on VLANs containing isolated ports,
otherwise, Layer 3 packets maybe fail to forward.
otherwise, Layer 3 packets maybe fail to forward.
Configuring an Isolated
Group
Configuring an Uplink
Port in the Isolated
Group
Table 94 Configuration tasks
Configuration tasks
Description
Detailed configuration
Configure an isolated group
Required
Refer to section “Configuring
an Isolated Group”
an Isolated Group”
Configure an upstream port
for an isolated group
for an isolated group
Required
Refer to section “Configuring
an Uplink Port in the Isolated
Group”
an Uplink Port in the Isolated
Group”
Configure isolated ports for
an isolated group
an isolated group
Required
Refer to section “Configuring
Isolated Ports for an Isolated
Group”
Isolated Ports for an Isolated
Group”
Table 95 Configuring an isolated group
Operation
Command
Description
Enter system view
system-view
-
Configure an isolated group
port-isolate group
isolate-group-id
isolate-group-id
Required
Ports in the isolated group can
only communicate with the
upstream ports. The isolated
ports and the upstream ports
must be in the same VLAN.
only communicate with the
upstream ports. The isolated
ports and the upstream ports
must be in the same VLAN.
Query isolation information
display port-isolate group [
isolate-group-id ] [ verbose ]
isolate-group-id ] [ verbose ]
You can carry out this
command in any view
command in any view
Table 96 Configuring an uplink port in the isolated group
Operation
Command
Description
Enter system view
system-view
-
Enter Ethernet port view
interface interface-type
interface-number
interface-number
Required