Unidirectional Isolation

You can create, query, modify, and clear a unidirectional port isolation configuration.

Context

You can configure or delete the unidirectional isolation between the current interface and a specified interface. If interface A is isolated from interface B, packets sent from interface A cannot reach interface B, but packets sent from interface B can reach interface A.

NOTE:

E interfaces, GE interfaces, XGE interfaces, and Eth-Trunk interfaces can be isolated from one another. But an interface cannot be isolated from itself or from the management interface unidirectionally. In addition, an Eth-Trunk cannot be isolated unidirectionally from its member interfaces.

Procedure

• Query a unidirectional isolation.
  1. Choose Security > Port isolation > Unidirectional isolation in the navigation tree to open the Unidirectional isolation page.
  2. Select an interface type from the drop-down list box.
  3. Enter the interface number, for example, 0/0/1 (stack ID/subcard ID/interface number).
  4. Click Query to display all matching records.
• Configure a unidirectional port isolation.
  NOTE:

  You can configure and modify unidirectional isolation in the same method.
  1. Choose Security > Port isolation > Unidirectional isolation in the navigation tree to open the Unidirectional isolation page.
  2. Click the corresponding icon to open the Modify isolation port list page.

     Table 1 describes the parameters on the page.

     Table 1 Modify isolation port list

     Parameter		Description
     Port name		Indicates the name of the interface where you want to modify the configuration. This parameter cannot be modified.
     Select the interface		Select the interface that you want to add to the isolation group on the port list on the left. Click to display the new interface on the right list.

  3. Select an interface.
  4. Click OK.
• Clear a unidirectional isolation.
  1. Choose Security > Port isolation > Unidirectional isolation in the navigation tree to open the Unidirectional isolation page.
  2. Select the interface configured with unidirectional isolation that you want to delete. You can delete an interface or multiple interfaces.
  3. Click Clear. The system asks you whether to delete the record.
  4. Click OK on the dialog box.