TP-Link T1600G-18TS T1600G-18TSUN V2 CLI Reference Guide Guide - Page 95

Chapter 9 Port Isolation Commands Port Isolation provides a method of restricting traffic flow to improve the network security by forbidding the port to forward packets to the ports that are not on its forwarding port list. 9.1 port isolation Description The port isolation command is used to configure the forward port/port channel list of a port/port channel, so that this port/port channel can only communicate with the ports/port channels on its list. To delete the corresponding configuration, please use no port isolation command. Syntax port isolation { [ fa-forward-list fa-forward-list ] [ gi-forward-list gi-forward-list ] [ po-forward-list po-forward-list ] [ te-forward-list te-forward-list ] } no port isolation Parameter fa-forward-list / gi-forward-list / te-forward-list -- The list of Ethernet ports. po-forward-list -- The list of port channels. Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet / interface port-channel / interface range port-channel) Privilege Requirement Only Admin and Operator level users have access to these commands. Example Set port 1, 2, 4 and port channel 2 to the forward list of port 1/0/5: Switch(config)# interface gigabitEthernet 1/0/5 Switch(config-if)# port isolation gi-forward-list 1/0/1-2,1/0/4 po-forward-list 2 Set all Ethernet ports and port channels to forward list of port 1/0/2, namely restore to the default setting: Switch(config)# interface gigabitEthernet 1/0/2 74