1-11 Port Isolation ConfigurationWhen configuring port isolation, go to these sections for information you are interested in:z Introduction to Port Isolationz Configuring the Isolation Group for a Isolation-Groupz Displaying and Maintaining Isolation Groupsz Port Isolation Configuration ExampleIntroduction to Port IsolationUsually, Layer 2 traffic isolation is achieved by assigning ports to different VLANs. To save VLANresources, port isolation is introduced to isolate ports within a VLAN, allowing for great flexibility andsecurity.Currently:z The device supports only one isolation group that is created automatically by the system asisolation group 1. You cannot remove the isolation group or create other isolation groups on thedevice.z There is no restriction on the number of ports assigned to an isolation group.The member port of an aggregation group cannot be configured as the uplink port of an isolation groupand vice versa. If you assign a port to an aggregation group and to an isolation group as the uplink portat the same time, the aggregation group configuration will take effect and the isolation groupconfiguration will be removed for backward configuration file compatibility. For detailed informationabout link aggregation, refer to Link Aggregation Configuration in the Access Volume.z Usually, Layer 2 traffic cannot be forwarded between ports in different VLANs. However, the Layer2 traffic from an isolated port can pass through the uplink port in the same isolation groupunidirectionally even if they belong to different VLANs.z Within the same VLAN, there are two types of connectivity of Layer 2 data on ports within andoutside the isolation group is shown in Figure 1-1.
