TL-SL3428/TL-SL3452 JetStream L2 Managed Switch CLI Guide
137
Chapter 21 Port isolation Commands Port Isolation provides a method of restricting traffic flow to improve the network security by
forbidding the port to forward packets to the ports that are not on its forwarding port list.
port isolation Description
The port isolation command is used to configure the forward port list of a port,
so that this port can only communicate with the ports on its port list. To delete
the corresponding configuration, please use no port isolation command.
Syntax
port isolation { [fa-forward-list fa-forward-list ] [gi-forward-list gi-forward-list] }
no port isolation
Parameter
fa-forward-list —— Configure Fast Ethernet ports to the forward port list. It is
optional.
gi-forward-list —— Configure Gigabit Ethernet ports to the forward port list. It is
optional.
Command Mode
Interface Configuration Mode (interface fastEthernet / interface range
fastEthernet / interface gigabitEthernet / interface range gigabitEthernet)
Example
Set Gigabit Ethernet ports 25-27 to the forward port list of Gigabit Ethernet 28:
TL-SL3428(config)#interface range gigabitEthernet 1/0/28
TL-SL3428(config-if-range)#port isolation gi-forward-list 1/0/25-27
Set all the Ethernet ports to forward port list of Fast Ethernet port 2, namely
restore to the default setting:
TL-SL3428(config)#interface fastEthernet 1/0/2
TL-SL3428(config-if-range)#no port isolation