11.20. Port Isolate Commands

11.20.1. port-isolate group

Command Purpose

Use the port-isolate group interface configuration command on the switch to set the isolate group of a interface.

Use the no form of this command to return to the default setting.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

port-isolate group GROUP

no port-isolate group

Parameter

Parameter Description

Parameter Value

GROUP

Port isolate group id

1-30

Command Mode

Interface Configuration

Default

None

Usage

The ports in the same isolate-group can not communicate with each other.

The ports in different isolate-groups should not be affected by this feature.

The isolate-groups can only be configured on physical port and Link Aggregation.

Examples

The following is sample output from the port-isolate group command:

Switch# configure terminal
Switch(config)# interface eth-0-1
Switch(config-if)# port-isolate group 4

11.20.2. port-isolate mode

Command Purpose

Use the port-isolate mode Global Config command on the switch to set isolate mode.

Use the no form of this command to return to the default setting.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

port-isolate mode ( all | l2 )

no port-isolate mode

Parameter

Parameter Description

Parameter Value

all

Isolate bridged packets and routed packets

-

l2

Isolate bridged packets

-

Command Mode

Global Config

Default

None

Usage

If configure “port-isolate mode l2”, all routed packets should not obey the port isolate rules.

If configure “port-isolate mode all”, all packets should obey the port isolate rules.

The default setting is “l2”

Examples

The following is sample output from the port-isolate mode command:

Switch# configure terminal
Switch(config)# port-isolate mode all

Related Commands

port-isolate group

11.20.3. show port-isolate

Command Purpose

Use the show port-isolate command on the switch to check the port-isolate configuration.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

show port-isolate ( group GROUP )

Parameter

Parameter Description

Parameter Value

GROUP

Port isolate group id

1-30

Command Mode

Privileged EXEC

Default

None

Usage

None

Examples

The following is sample output from the show port-isolate command:

switch # show port-isolate group 12

Port Isolate Mode  : L2
------------------------------------------------------------------
 Port Isolate Groups:
------------------------------------------------------------------
 Groups ID: 12
eth-0-1   eth-0-2   eth-0-3   eth-0-4   eth-0-5   
eth-0-6   
------------------------------------------------------------------

Related Commands

port-isolate group

11.20.4. port-isolate am

Command Purpose

Use this command to enable unidirectional isolation.

Use the no form of this command to disable it.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

port-isolate am interface IFNAME

port-isolate am interface range IFRNG

no port-isolate am interface IFNAME

no port-isolate am interface range IFRNG

no port-isolate am

Parameter

Parameter Description

Parameter Value

IFNAME

port name

Support physical/aggregationports

IFRNG

string to defing port range

Support physical/aggregationports. Use comma and short bar to describe a range of ports.

Command Mode

Interface Configuration

Default

None

Usage

Unidirectional isolation can not co-work with isolate group on a same interface.

Examples

The following example shows how to deny the packet received from eth-0-9 and send to eth-0-10:

Switch# configure terminal
Switch(config)# interface eth-0-9
Switch(config-if)# port-isolate am interface eth-0-10

Related Commands

show port-isolate