vlan 10
vlan 20
vlan 30
qu
创建端口隔离组,同1隔离组里的端口之间不能访问。
port-isolate group 1
interface GigabitEthernet 1/0/1
port hybrid pvid vlan
port link-type hybrid
只允许vlan 10 20 30的流量通过
port hybrid vlan 10 20 30 untagged
qu
interface GigabitEthernet 1/0/2
port link-type hybrid
定义该端口属于vlan 10
port hybrid pvid vlan 10
只允许vlan 10 的流量通过
port hybrid vlan 10 untagged
qu
interface GigabitEthernet 1/0/3
port link-type hybrid
port hybrid pvid vlan 10
port hybrid vlan 10 untagged
qu
interface GigabitEthernet 1/0/4
port link-type hybrid
port hybrid pvid vlan 20
port hybrid vlan 20 untagged
qu
interface GigabitEthernet 1/0/5
port link-type hybrid
port hybrid pvid vlan 20
port hybrid vlan 20 untagged
qu
interface GigabitEthernet 1/0/6
port link-type hybrid
port hybrid pvid vlan 30
port hybrid vlan 30 untagged
该端口属于隔离端口组1
port-isolate enable group 1
qu
interface GigabitEthernet 1/0/7
port link-type hybrid
port hybrid pvid vlan 30
port hybrid vlan 30 untagged
port-isolate enable group 1
qu