CX31x port isolation configuration

4

To implement L2 isolation between packets, you can add different ports to different VLANs. However, this method wastes VLAN resources. The port isolation function can isolate ports in the same VLAN. You only need to add ports to a port isolation group to implement L2 isolation between these ports. The port isolation function provides users with more secure and flexible networking solutions.

For details about the CX31x port isolation configuration, see the following documents.
? C00 version:
http://support.huawei.com/enterprise/en/doc/DOC1000044778/?idPath=7919749|9856522|21782478|19955021|19961380
? C10 version:
http://support.huawei.com/enterprise/en/doc/DOC1000041694/?idPath=7919749|9856522|21782478|19955021|19961380

Other related questions:
Configure port isolation on the S1728GWR-4P switch
Configure port isolation on an S1728GWR-4P switch as follows: 1. Choose Security > Port Isolation. 2. Set Interface to Port or Trunk. 3. Enable or disable port isolation on a specified interface or trunk. 4. Click Apply to complete the configuration.

Why is port isolation needed
To save VLAN resources, enable port isolation to isolate interfaces in a VLAN. That is, you can add interfaces to a port isolation group to implement Layer 2 or Layer 3 isolation between these interfaces. Port isolation provides secure and flexible networking schemes for customers.

Precautions for configuring port isolation on S series switches
Precautions for configuring port isolation on S series switches (except the S1700) are as follows: 1. Port isolation takes effect only for interfaces on the same switch, and cannot take effect for interfaces on different switches. 2. Interfaces in a port isolation group are isolated from each other, but interfaces in different port isolation groups can communicate. If the group-id parameter is not specified, interfaces are added to port isolation group 1 by default. 3. For S series switches, the default port isolation mode is Layer 2 isolation and Layer 3 interworking. To configure Layer 2 and Layer 3 isolation, run the port-isolate mode all command in the system view.

Configure bidirectional port isolation on the S1700-FR or S1700-GFR switch
Configure bidirectional port isolation on an S1700-FR or S1700-GFR switch as follows: 1. Choose Security > Interface Isolation. 2. Click the Two-way Isolation tab. 3. Select the interface on which bidirectional port isolation is configured and click Configure. 4. Select Enable from the Status drop-down list box to enable bidirectional port isolation. 5. Click Apply.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top