1-2Figure 1-1 Layer 2 traffic forwarding for an isolation groupz The arrows in the above figure indicate the move direction of Layer 2 traffic.z In the same VLAN, the Layer 2 traffic of an isolated port in an isolation group cannot reach a portoutside the isolation group. This is because the Layer 2 traffic of the isolated port is sent to theuplink port of the same isolation group, in which case, the port outside the isolation group cannotreceive the Layer 2 traffic of the isolated port.Configuring the Isolation Group for a Isolation-Group DeviceAssigning a Port to the Isolation GroupFollow these steps to add a port to the isolation group:To do… Use the command… RemarksEnter system view system-view —EnterEthernetinterfaceviewinterface interface-typeinterface-numberEnterLayer 2aggregateinterfaceviewinterfacebridge-aggregationinterface-numberEnterinterfaceview or,port groupviewEnter portgroup viewport-group manualport-group-nameRequiredUse one of the commands.z In Ethernet interface view, thesubsequent configurations apply tothe current port.z In Layer 2 aggregate interface view,the subsequent configurations applyto the Layer 2 aggregate interface andall its member ports.z In port group view, the subsequentconfigurations apply to all ports in theport group.Assign the port or portsto the isolation group asan isolated port or portsport-isolate enableRequiredNo ports are added to the isolation groupby default.Specifying the Uplink Port for the Isolation GroupFollow these steps to specify the uplink port for the isolation group:
