3com 8807 Reference Guide

Use the isolate-user-vlan command to establish the mapping relationship 
between isolate-user-vlan and Secondary VLAN.

Use the undo isolate-user-vlan command to cancel the mapping relationship.

By default, there is no mapping relationship between isolate-user-vlan and 
Secondary VLAN.

Before you execute the isolate-user-vlan command, the VLAN can include hybrid 
ports, access ports, or no ports. After this command is executed, the mapping 
relationship between isolate-user-vlan and Secondary VLAN is established.

The actual operation include: for access ports or hybrid ports whose PVIDs are the 
same as isolate-user-VLAN IDs and join to isolate-user-vlans in the untagged mode, 
add the ports of isolate-user-VLAN to every Secondary VLAN and add the ports of 
all Secondary VLANs to isolate-user-VLAN.

After undo isolate-user-vlan command is executed, the mapping relationship 
between isolate-user-vlan and Secondary VLAN will be canceled. The actual 
operation include: delete the ports included in isolate-user-vlan from Secondary 
VLAN and delete the ports included in Secondary VLAN from isolate-user-vlan.

Related command: display isolate-user-vlan.

# Map isolate-user-VLAN 10 to Secondary VLAN 2, 3, 4, 5, and 9.

[SW8800] isolate-user-vlan 10 secondary 2 to 5 9 

VLAN view

None

Use the isolate-user-vlan enable command to set a VLAN as an 
isolate-user-VLAN.

Use the undo isolate-user-vlan enable command to cancel the configuration.

An isolate-user-VLAN is allowed to contain multiple ports, including upstream 
ports connecting to other switches. However, the VLAN can only contain access or 
hybrid ports, not trunk ports.

Related command: display isolate-user-vlan.