Port isolation applies only to interfaces of the same device and cannot isolate interfaces on different devices.

Interfaces in a port isolation group are isolated from each other, but interfaces in different port isolation groups can communicate. If group-id is not specified, an interface is added to port isolation group 1.

By default, port isolation blocks Layer 2 communication but allows Layer 3 communication. To isolate interfaces at both Layer 2 and Layer 3, run the port-isolate mode all command in the system view.