H3C Technologies H3C S7500E Series Switches - Manual (Page 151)

12-2
To do… Use the command… Remarks
Enter port
group view
port-group manual
port-group-name
In port group view, the subsequent
configurations apply to all ports in the port
group.
Assign the port or ports to
the isolation group as an
isolated port or ports
port-isolate enable
Required
No ports are added to the isolation group by
default.
After you configure a command on a Layer-2 aggregate interface, the system starts applying the
configuration to the aggregate interface and its aggregation member ports. If the system fails to do that
on the aggregate interface, it stops applying the configuration to the aggregation member ports. If it
fails to do that on an aggregation member port, it simply skips the port and moves to the next port.
Displaying and Maintaining Isolation Groups
To do… Use the command… Remarks
Display the isolation group
information on a
single-isolation-group device
display port-isolate group Available in any view
Port Isolation Configuration Example
Network requirements
Users Host A, Host B, and Host C are connected to GigabitEthernet 2/0/1, GigabitEthernet 2/0/2,
and GigabitEthernet 2/0/3 of Device.
Device is connected to the Internet through GigabitEthernet 2/0/4.
GigabitEthernet 2/0/2, GigabitEthernet 2/0/3, and GigabitEthernet 2/0/4 belong to VLAN 2 and
GigabitEthernet 2/0/1 carries VLAN 2.
It is required that Host A, Host B, and Host C can access the Internet while being isolated from one
another.