Configuring a Port Isolation Group
# Configure port isolation on GE1/0/1 and GE1/0/2 to implement Layer 2 isolation and Layer 3 interworking on the two interfaces.
<HUAWEI> system-view [HUAWEI] port-isolate mode l2 [HUAWEI] interface gigabitethernet 1/0/1 [HUAWEI-GigabitEthernet1/0/1] port-isolate enable group 1 [HUAWEI-GigabitEthernet1/0/1] quit [HUAWEI] interface gigabitethernet 1/0/2 [HUAWEI-GigabitEthernet1/0/2] port-isolate enable group 1 [HUAWEI-GigabitEthernet1/0/2] quit
# Configure port isolation on GE1/0/10 to GE1/0/20 to implement Layer 2 and Layer 3 isolation on these interfaces.
<HUAWEI> system-view [HUAWEI] port-isolate mode all [HUAWEI] port-group portgroup1 [HUAWEI-port-group-portgroup1] group-member gigabitethernet 1/0/10 to gigabitethernet 1/0/20 [HUAWEI-port-group-portgroup1] port-isolate enable group 2
NOTE:
All S series chassis switches support Layer 2 and Layer 3 isolation. S series box switches support Layer 2 and Layer 3 isolation excluding the S2700SI and S2700EI in V100R006C05 and the S1720, S2720, S2750EI, S5700LI, S5710-X-LI, S5710-C-LI and S5700S-LI in V200R001 and later versions.
Configuring Unidirectional Isolation
# Configure unidirectional isolation to isolate GE1/0/5 from GE1/0/6, GE1/0/7, and GE1/0/8 unidirectionally. This configuration ensures that Layer 2 data packets from GE1/0/5 cannot reach GE1/0/6, GE1/0/7, and GE1/0/8.
<HUAWEI> system-view [HUAWEI] port-isolate mode l2 [HUAWEI] interface gigabitethernet 1/0/5 [HUAWEI-GigabitEthernet1/0/5] am isolate gigabitethernet 1/0/6 to 1/0/8
More Information: S Series Switches Common Operation Guide
