JUNE 26 2002 ISOLATED PORT GROUPS DESCRIPTION EACH PORT

Port Isolation Feature

June 26, 2002

Isolated Port Groups

Description:

Each port is configurable as any one of six types: 1) Group1, 2) Group2, 3) Public, 4) Private, 5) Local, and 6) Uplink

Nodes on group1 ports communicate with each other and any nodes on network devices that are connected to this switch's uplink ports. They do not communicate with group2, private, public, nor local ports on this switch.
Nodes on group2 ports communicate with each other and any nodes on network devices that are connected to this switch's uplink ports. They do not communicate with group1, private, public, nor local ports on this switch.
Nodes on public ports can communicate with nodes on public ports of this switch, nodes on local ports of this switch, and any nodes on network devices that are connected to this switch's uplink ports. Nodes on public ports cannot communicate with nodes on private, group1, nor group2 ports of this switch.
Nodes on private ports can communicate with nodes on uplink ports and any nodes on network devices that are connected to this switch's uplink ports.
Nodes on local ports communicate with nodes on other local ports on this switch and nodes on public ports on this switch.
Nodes on uplink ports of this switch (including nodes on network devices that are connected to uplink ports on this switch) can communicate with nodes on group1, group2, public, and private ports on this switch.

Configuration Caveats:

This feature is for use only in networks that do not use VLAN tagging.
Trunking may only be used on uplink ports.
For security, LACP is permissible on uplink ports only. It must be disabled on other ports.
VLANs other than the default VLAN must be deleted prior to configuring Isolated Port Groups.
VLAN configuration changes are not permitted.
GVRP must be disabled.
IGMP operates in a non-data-driven mode
IGMP only works on uplink ports. Multicast IP traffic arriving at non-uplink ports is flooded.
A configured switch cannot export its port isolation configuration. A configuration file on a server may contain the port isolation commands.
This feature is not distributed across switches. Nodes on any type of port (e.g., group1, private, etc.) of one switch can communicate with node on any type of port (e.g., group2, private, etc.) of another switch, if those two switches are connected using their uplink ports.

Port Isolation Command Syntax:

[no] port-isolation [<port-list>

Parameters:

port-isolation - Enables port-isolation feature on the switch. All ports are defaulted to mode “uplink”.

Remember:

Examples:

no port-isolation

Disables the port-isolation feature. All ports operate normally.

port-isolation

Activates the port isolation feature. All ports default to mode “uplink”.

Example:

port-isolation 1-12 mode private

This changes ports 1-12 to be in private mode. All other ports remain unchanged.

Displaying Port Isolation Configuration*:

show port-isolation

Displays the port isolation configuration for all ports.

*note: This is the only method to display the status of port isolation. The switch’s configuration file will not

indicate port isolation’s status.