How Do I Use Port Isolation to Prevent Users in the Same VLAN from Communicating

TomJ · Created Feb 22, 2016 08:08:30

Port isolation can isolate interfaces in the same VLAN. You can add interfaces to a port isolation group to prevent these interfaces from sending data packets to each other.

For example, GE0/0/1 and GE0/0/2 belong to VLAN10. You can configure port isolation to prevent users connected to GE0/0/1 and GE0/0/2 respectively from sending data packets to each other.
<HUAWEI> system-view
[HUAWEI] vlan 10
[HUAWEI-vlan10] quit
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] port link-type access
[HUAWEI-GigabitEthernet0/0/1] port default vlan 10
[HUAWEI-GigabitEthernet0/0/1] port-isolate enable
[HUAWEI-GigabitEthernet0/0/1] quit
[HUAWEI] interface gigabitethernet 0/0/2
[HUAWEI-GigabitEthernet0/0/2] port link-type access
[HUAWEI-GigabitEthernet0/0/2] port default vlan 10
[HUAWEI-GigabitEthernet0/0/2] port-isolate enable
[HUAWEI-GigabitEthernet0/0/2] quit

Enterprise

Consumer

Corporate

Carriers

How Do I Use Port Isolation to Prevent Users in the Same VLAN from Communicating

Third Party’s Trade Secret