How to check the interfaces with port isolation enabled

22

You can run the display port-isolate group { group-id | all } command in any view to check member interfaces in a port isolation group.

# Check member interfaces in all port isolation groups.
display port-isolate group all
The ports in isolate group 3:
GigabitEthernet0/0/1 GigabitEthernet0/0/2
NOTE:
Uplink and downlink interfaces on the device cannot be added to the same port isolation group. Otherwise, users may not access the network.

Other related questions:
Configure bidirectional port isolation on the S1700-FR or S1700-GFR switch
Configure bidirectional port isolation on an S1700-FR or S1700-GFR switch as follows: 1. Choose Security > Interface Isolation. 2. Click the Two-way Isolation tab. 3. Select the interface on which bidirectional port isolation is configured and click Configure. 4. Select Enable from the Status drop-down list box to enable bidirectional port isolation. 5. Click Apply.

How to check whether MPLS is enabled on an AR interface
Run the display mpls interface [ interface-type <interface-number> ] [ verbose ] command to check information about MPLS-enabled interfaces.
[Huawei] display mpls interface
Interface  Status  TE Attr  LSP Count  CRLSP Count Effective MTU
GE1/0/0    Up       Dis        2                   0                        1500
Note:
- Interface: indicates the type and number of the interface enabled with MPLS.
- Status: indicates the status of the interface, which is Up or Down.
- TE Attr: indicates whether the TE attribute is enabled. Dis indicates that the TE attribute is disabled, and En indicates that the TE attribute is enabled.
- LSP Count: indicates the number of established LSPs on the interface.
- CRLSP Count: indicates the number of established CR-LSPs on the interface.
- Effective MTU: indicates the MTU used for forwarding MPLS packets.

How to check member interfaces in a port group
You can run the display port-group [ all | port-group-name ] command to check member interfaces in a permanent port group. The port group function allows you to configure interfaces in a batch. However, the device does not support query or saving of the port group configuration. You can run the display this command in the interface view of a member interface to check the configuration that takes effect on the interface. # Check member interfaces in all permanent port groups. display port-group all Portgroup: 1 GigabitEthernet0/0/1 GigabitEthernet0/0/2 GigabitEthernet0/0/3 Portgroup: 2 GigabitEthernet0/0/4 GigabitEthernet0/0/5 GigabitEthernet0/0/6

Configure port isolation on the S1728GWR-4P switch
Configure port isolation on an S1728GWR-4P switch as follows: 1. Choose Security > Port Isolation. 2. Set Interface to Port or Trunk. 3. Enable or disable port isolation on a specified interface or trunk. 4. Click Apply to complete the configuration.

How to choose between MFF and port isolation
Port isolation and MFF have similar effects. You can choose one according to your needs. The differences between port isolation and MFF are as follows: 1. Port isolation is configured on interfaces, while MFF is configured in VLANs. 2. Port isolation physically separates interfaces, and users may be not allowed to communicate with each other. MFF ensures that users can communicate through Layer 3. 3. Port isolation is applied to users on one device, while MFF can be applied to users on different devices as long as the users are in the same VLAN. 4. Port isolation is valid to all Ethernet packets, while MFF is only valid to IP packets. 5. The VLANIF interfaces can be configured for the VLANs on the interfaces with port isolation configured. The VLANs with MFF enabled cannot have VLANIF interfaces.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top