Operation Manual – Port IsolationH3C S5600 Series Ethernet Switches Chapter 1 Port Isolation Configuration1-2Note:z When a member port of an aggregation group joins/leaves an isolation group, theother ports in the same aggregation group on the local unit will join/leave theisolation group at the same time.z For ports that belong to an aggregation group and an isolation group simultaneously,removing a port from the aggregation group has no effect on the other ports. That is,the rest ports remain in the aggregation group and the isolation group.z Ports that belong to an aggregation group and an isolation group simultaneously arestill isolated even when you remove the aggregation group in system view.z Adding a port of an isolation group to an aggregation group causes all the ports inthe aggregation group being added to the isolation group.z S5600 series Ethernet switches support cross-device port isolation if IRF fabric isenabled.z For S5600 series Ethernet switches belonging to the same IRF Fabric, the portisolation configuration performed on a port of a cross-device aggregation groupcannot be synchronized to the other ports of the aggregation group if the portsreside on other units. That is, to add multiple ports in a cross-device aggregationgroup to the same isolation group, you need to perform the configuration for each ofthe ports individually.1.3 Displaying and Maintaining Port Isolation ConfigurationTo do ... Use the command ... RemarksDisplay information aboutthe Ethernet ports addedto the isolation groupdisplay isolate port Available in any view1.4 Port Isolation Configuration ExampleI. Network requirementsz PC 2, PC 3 and PC 4 are connected to GigabitEthernet1/0/2, GigabitEthernet1/0/3,and GigabitEthernet1/0/4 ports.z The switch connects to the Internet through GigabitEthernet1/0/1 port.z It is desired that PC 2, PC 3 and PC 4 cannot communicate with each other.