The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
You can configure certain ports on a device in isolation mode. Ports that are in isolation mode are allowed to communicate only to upstream ports, and not to downstream ports. This improves the security of the network and provides a flexible network solution.
To configure port isolation, perform this procedure.
| Command or Action | Purpose | |
|---|---|---|
| Step 1 |
enable Example: |
Enables privileged EXEC mode. Enter your password, if prompted. |
| Step 2 |
configure terminal Example: |
Enters global configuration mode. |
| Step 3 |
[no] port-isolation ethernet port-number Example: |
Configures port isolation. port-number : The port ID. Use the no port-isolation {all | ethernet port-number} command to delete port isolation. |
| Step 4 |
show port-isolation Example: |
Displays the isolation port. |
The following examples are that of a network topology where PC1, PC2, and PC3 are connected to ports 2, 3, and 4 of a device. The device is connected to the external network through port 1. PC1, PC2, and PC3 should be isolated between Layer 2 and Layer 3.
The following example shows how to configure ports 2, 3, and 4 as downlink ports, and port 1 as uplink port:
Device> enable
Device# configure terminal
Device(config)# port-isolation ethernet 1/2 to e 1/4 The following example shows how to view the isolation port configuration:
Device> enable
Device# configure terminal
Device(config)# show port-isolation
Port isolation downlink port :
e1/2-e1/4.
Feedback