1-11 Port Isolation ConfigurationWhen configuring port isolation, go to these sections for information you are interested in:z Port Isolation Overviewz Port Isolation Configurationz Displaying and Maintaining Port Isolation Configurationz Port Isolation Configuration ExamplePort Isolation OverviewThe port isolation feature is used to secure and add privacy to the data traffic and prevent maliciousattackers from obtaining the user information. With the port isolation feature, you can add the ports to becontrolled into an isolation group to isolate the Layer 2 and Layer 3 data between each port in theisolation group (a port in an isolation group does not forward traffic to the other ports in the isolationgroup).The ports in an isolation group must reside on the same switch or different units of an IRF fabric.z Currently, you can create only one isolation group on an S5600 Series Ethernet switch. Thenumber of Ethernet ports in an isolation group is not limited.z An isolation group only isolates the member ports in it.Port Isolation ConfigurationYou can perform the following operations to add an Ethernet port to an isolation group, thus isolatingLayer 2 and Layer 3 data among the ports in the isolation group.Follow these steps to configure port isolation:To do ... Use the command ... RemarksEnter system view system-view —Enter Ethernet port view interface interface-typeinterface-number —Add the Ethernet port to theisolation group port isolateRequiredBy default, an isolation groupcontains no port.
