配置隔离组使二层之间不能相互通信，但可以与外部网络通信

1.创建隔离组2
<Device>system-view
[Device]port-isolate group 2

2.将端口g1/0/1,g1/0/2,g1/0/3加入隔离组2中
[Device]int g1/0/1
[Device-Gigab it Ethernet1/0/1]port-isolate enable group 2
[Device-Gigab it Ethernet1/0/1]quit
[Device]int g1/0/2
[Device-Gigab it Ethernet1/0/2]port-isolate enable group 2
[Device-Gigab it Ethernet1/0/2]quit
[Device]int g1/0/3
[Device-Gigab it Ethernet1/0/3]port-isolate enable group 2
[Device-Gigab it Ethernet1/0/3]quit

验证配置：
1.显示隔离组2中的信息
[Device]display port-isolate group 2
Port-isolation group information :
Group ID:2
Group members:
G1/0/1
G1/0/2
G1/0/3

转载于:https://blog.51cto.com/14220598/2364326