CÔNG TY TNHH CÔNG NGHỆ VIỆT THÁI DƯƠNG
Logo CNTTShop.vn

NTT03, Line 1, Thống Nhất Complex, Thanh Xuân, Hà Nội.
Danh mục sản phẩm

Configure Basic Functions of Port Isolation

The port isolation function realizes unidirectional packet isolation. Assuming that port B is configured as the isolated port of port A, then if a packet whose target port is port B enters port A, the port is directly discarded. However, if a packet whose target port is port B enters port B, the port is normally forwarded. The isolated port can be a port or an aggregation group.

Port isolation is configured based on the isolation group.

  • The ports in one isolation group are isolated from each other.

The ports in the isolation group can be configured as ingress, egress, both mode, and the resolutions are as follows:

Table 2-2 Configuration mode forwarding table

Packet Ingress Port Mode

Packet Egress Port Mode

Forward Normally or Not

Ingress mode

ingress mode

Forward normally

ingress mode

egress mode

Forbid forwarding

ingress mode

both mode

Forbid forwarding

egress mode

ingress mode

Forward normally

egress mode

egress mode

Forward normally

egress mode

both mode

Forward normally

both mode

ingress mode

Forward normally

both mode

egress mode

Forbid forwarding

both mode

both mode

Forbid forwarding

  • The ports in the isolation group communicate with the ports not added to the isolation group normally.

The ports of different isolation groups can communicate normally.

Configuration Condition

The isolation group is already created.

Configure Port Isolation

Table 2-3 Configuring Port Isolation

Step

Command

Description

Enter the global configuration mode.

configure terminal

-

Enter the isolation group configuration mode

isolate group group-id

Mandatory

Add the port to the isolation group

interface link-aggregation link-aggregation-id [ ingress | egress | both ]

Mandatory
By default, the port is not added to the isolation group.

Add the aggregation group to the isolation group

link-aggregation link-aggregation-id [ ingress | egress | both ]

Mandatory
By default, the aggregation group is not added to the isolation group.

note


  • When adding one port to the isolation group, the isolation group needs to be created.