92NOTE:The arrows in the above figure indicate the move directions of Layer 2 traffic.Configuring an isolation groupAssigning ports to an isolation groupTo assign ports to an isolation group:Step Command Remarks1. Enter system view. system-view N/A2. Create an isolation group. port-isolate group group-number N/A3. Enter interface view orport group view.• Enter Ethernet interface view:interface interface-typeinterface-number• Enter port group view:port-group manualport-group-name• Enter Layer 2 aggregateinterface view:interfacebridge-aggregationinterface-numberUse one of the commands.• To assign Ethernet ports to theisolation group one by one, performthe command in Ethernet interfaceview.• To bulk assign Ethernet ports to theisolation group, perform thecommand in port group view.• The configuration in Layer 2aggregate interface view applies tothe Layer 2 aggregate interface andits aggregation member ports. If therouter fails to apply the configurationto the aggregate interface, it does notassign any aggregation member portto the isolation group. If the failureoccurs on an aggregation memberport, the router skips the port andcontinues to assign other aggregationmember ports to the isolation group.4. Assign ports to anisolation group as isolatedports.port-isolate enable groupgroup-numberNo ports are assigned to any isolationgroup by default.Specifying the uplink port for an isolation groupTo specify the uplink port for an isolation group:Step Command Remarks1. Enter system view. System-view N/A
