华为交换机配置端口隔离
知识点：端口隔离可以实现同一vlan内端口之间的隔离。用户只需要将端口加入到隔离组中，就可以实现隔离组内端口之间的二层数据隔离。端口隔离功能为用户提供了更安全、更灵活的组网方案
拓扑图
SW1的配置
<Huawei>system-viewEnter system view, return user view with Ctrl+Z.[Huawei]sysname SW1[SW1]undo info-center enableInfo: Information center is disabled.[SW1]vlan 2[SW1-vlan2]quit[SW1]display vlan The total number of vlans is : 2--------------------------------------------------------------------------------U: Up; D: Down; TG: Tagged; UT: Untagged;MP: Vlan-mapping; ST: Vlan-stacking;#: ProtocolTransparent-vlan; *: Management-vlan;--------------------------------------------------------------------------------VID Type Ports --------------------------------------------------------------------------------1 common UT:GE0/0/1(U) GE0/0/2(U) GE0/0/3(U) GE0/0/4(U) GE0/0/5(D) GE0/0/6(D) GE0/0/7(D) GE0/0/8(D) GE0/0/9(D) GE0/0/10(D) GE0/0/11(D) GE0/0/12(D) GE0/0/13(D) GE0/0/14(D) GE0/0/15(D) GE0/0/16(D) GE0/0/17(D) GE0/0/18(D) GE0/0/19(D) GE0/0/20(D) GE0/0/21(D) GE0/0/22(D) GE0/0/23(D) GE0/0/24(D) 2 common VID Status Property MAC-LRN Statistics Description --------------------------------------------------------------------------------1 enable default enable disable VLAN 0001 2 enable default enable disable VLAN 0002 [SW1]port-group group-member g0/0/1 to g0/0/3[SW1-GigabitEthernet0/0/1]port link-type access[SW1-GigabitEthernet0/0/2]port link-type access[SW1-GigabitEthernet0/0/3]port link-type access[SW1-port-group]port default vlan 2[SW1-GigabitEthernet0/0/1]port default vlan 2[SW1-GigabitEthernet0/0/2]port default vlan 2[SW1-GigabitEthernet0/0/3]port default vlan 2[SW1-port-group]quit[SW1]interface GigabitEthernet 0/0/1[SW1-GigabitEthernet0/0/1]port-isolate enable group 1[SW1-GigabitEthernet0/0/1]quit[SW1]int g0/0/2[SW1-GigabitEthernet0/0/2]port-isolate enable group 1[SW1-GigabitEthernet0/0/2]quit##开启arp代理实现隔离组互通[SW1-Vlanif2]arp-proxy inner-sub-vlan-proxy enable [SW1-Vlanif2]ip address 10.1.1.254 24[SW1-Vlanif2]quit