Bidirectional Isolation

You can create, query, modify, or delete an isolation mode or a bidirectional isolation configuration.

Interfaces in a port isolation group are isolated from each other, but interfaces in different port isolation groups can communicate.
The switch supports a maximum of 64 port isolation groups, numbered from 1 to 64.

Configure an isolation mode.
NOTE:
- The default mode is L2, namely, ports are isolated at Layer 2 but can communicate at Layer 3.
- After the isolation mode is selected, the bidirectional isolation and unidirectional isolation configurations are applied to this mode.
- Configuring the isolation mode is not affected by switching the bidirectional isolation and unidirectional isolation labels.
1. Choose Security > Port Isolation in the navigation tree to open the Port Isolation page.
2. Choose the isolation mode. The isolation can be L2 or ALL. L2 is Layer 2 isolation and Layer 3 communication. ALL is the isolation at both Layer 2 and Layer 3.
3. Click Apply.
Query an isolation group.
1. Choose Security > Port Isolation in the navigation tree to display the Port Isolation page. Then click the Bidirectional Isolation tab.
2. Enter a number in the text box of Isolation Group Number.
3. Click Query to display all matching records.

Create an isolation group.

Choose Security > Port Isolation in the navigation tree to display the Port Isolation page. Then click the Bidirectional Isolation tab.

Click Create to open the Create an isolation group page.

Table 1 describes the parameters on the page.

**Table 1** Create an isolation group
Parameter		Description
Isolation group number		Indicates the value that the system generates automatically. The value ranges from 1 to 64. When creating an isolation group, the system assigns the minimum in existing numbers to the new isolation group.
Select a Port		Select the interface that you want to add to the isolation group on the port list on the left. Click to display the new interface on the right list.

Modify an isolation group.
1. Choose Security > Port Isolation in the navigation tree to display the Port Isolation page. Then click the Bidirectional Isolation tab.
2. Click the corresponding icon to open the Modify isolation group page.
  Table 1 describes the parameters on the page.
3. Select an interface.
4. Click OK.
Delete an isolation group.
1. Choose Security > Port Isolation in the navigation tree to display the Port Isolation page. Then click the Bidirectional Isolation tab.
2. Select the isolation group that you want to delete. You can delete an isolation group or multiple isolation groups.
3. Click Delete. The system asks you whether to delete the record.
4. Click OK.