Operation Manual – Port Correlation ConfigurationH3C S7500E Series Ethernet Switches Chapter 2 Port Isolation Configuration2-1Chapter 2 Port Isolation ConfigurationWhen configuring port isolation, go to these sections for information you are interestedin:z Introduction to Port Isolationz Configuring an Isolation Groupz Displaying Isolation Groupsz Port Isolation Configuration Example2.1 Introduction to Port IsolationTo implement Layer 2 isolation, you can add different ports to different VLANs. However,this will waste the limited VLAN resource. With port isolation, the ports can be isolatedwithin the same VLAN. Thus, you need only to add the ports to the isolation group toimplement Layer 2 isolation. This provides you with more secure and flexiblenetworking schemes.On the current device:z A device supports only one isolation group that is created automatically by thesystem as Isolation Group 1. The user can neither delete the isolation group norcreate other isolation groups.z There is no restriction on the number of ports to be added to an isolation group.z A port inside an isolation group and a port outside the isolation group cancommunicate with each other at Layer 2. Ports of the isolation group cannotcommunicate with each other.2.2 Configuring an Isolation Group2.2.1 Adding a Port to an Isolation GroupFollow these steps to add a port to an isolation group:To do… Use the command… RemarksEnter system view system-view —EnterEthernet portviewinterface interface-typeinterface-numberEnterEthernet portview orportgroupviewEnterportgroupviewport-group { manualport-group-name |aggregation agg-id }Use either command.Configured in Ethernet port view,the setting is effective on thecurrent port only; configured inport group view, the setting iseffective on all ports in the portgroup.
