3com 2928 User Guide

Page of 505
 
1-2 
Table 1-1 
Port isolation group configuration items 
Item 
Description 
Config type 
Specify the role of the port or ports in the isolation group. 
z
 
Isolate port: Assign the port or ports to the isolation group as an isolated 
port or ports. 
z
 
Uplink-port: Assign the port to the isolation group as the uplink port. 
 
The uplink port is not supported on 3Com Switch 2900.series 
Select port(s) 
Select the port(s) you want to assign to the isolation group. 
You can click ports on the chassis front panel for selection; if aggregation 
interfaces are configured, they will be listed under the chassis panel for 
selection. 
 
Port Isolation Group Configuration Example 
Network requirements 
z
 
Campus network users Host A, Host B, and Host C are connected to GigabitEthernet 1/0/2, 
GigabitEthernet 1/0/3, and GigabitEthernet 1/0/4 of Switch. 
z
 
Switch is connected to the Internet through GigabitEthernet 1/0/1. 
z
 
GigabitEthernet 1/0/1, GigabitEthernet 1/0/2, GigabitEthernet 1/0/3, and GigabitEthernet 1/0/4 
belong to the same VLAN. 
It is required that Host A, Host B, and Host C can access the Internet while being isolated from one 
another.  
Figure 1-2 
Networking diagram for port isolation group configuration 
Internet
Host A
Host B
Host C
GE1/0/3
GE1/0/2
GE1/0/4
GE1/0/1
Switch
 
 
Configuration procedure 
# Assign GigabitEthernet 1/0/2, GigabitEthernet 1/0/3, and GigabitEthernet 1/0/4 to an isolation group 
as isolated ports.  
Select Security > Port Isolate Group from the navigation tree and in the page that appears, click the 
Modify
 tab to enter the page shown in