3com 4210 PWR 9-Port 3CR17341-91-ME User Manual

Through the port isolation feature, you can add the ports to be controlled into an 
isolation group to isolate the Layer 2 and Layer 3 data between each port in the 
isolation group. Thus, you can construct your network in a more flexible way and 
improve your network security.

Currently, you can create only one isolation group on the Switch 4210. This 
feature is also known as a Protected Port or an Isolated Port. The number of 
Ethernet ports in an isolation group is not limited.

n 

■

An isolation group only isolates the member ports in it.

■

Port isolation is independent of VLAN configuration.

You can perform the following operations to add an Ethernet ports to an isolation 
group, thus isolating Layer 2 and Layer 3 data among the ports in the isolation 
group.

n 

■

When a member port of an aggregation group joins/leaves an isolation group, 
the other ports in the same aggregation group on the local device will 
join/leave the isolation group at the same time.

■

For ports that belong to an aggregation group and an isolation group 
simultaneously, removing a port from the aggregation group has no effect on 
the other ports. That is, the rest ports remain in the aggregation group and the 
isolation group.

■

Ports that belong to an aggregation group and an isolation group 
simultaneously are still isolated even when you remove the aggregation group 
in system view.

■

Adding a port of an isolation group to an aggregation group causes all the 
ports in the aggregation group being added to the isolation group.

Table 75   Configure port isolation

Enter system view 

system-view 

- 

Enter Ethernet port view 

interface interface-type 
interface-number 

- 

Add the Ethernet port to 
the isolation group 

port isolate 

Required

By default, an isolation group 
contains no port.