Filter
Top Products
23
Enhancements in Release F.05.05 through F.05.70
Enhancements in Release F.05.05 through F.05.60
Operating Rules for Port Isolation
■ Port Isolation is intended only for networks that do not use VLAN tagging. (The switch must
be in the default VLAN configuration before you configure port-isolation.)
■ Multiple VLANs are not allowed on the switch. If multiple VLANs exist on the switch, delete
them and return the ports to the original default configuration as untagged members of VLAN
1. (VLAN configuration changes are not supported if port-isolation is running on the switch.)
■ Trunking is supported only on Uplink ports between switches. Remove any other port
trunking from the switch.
■ LACP is allowed only on the Uplink ports. For security, LACP (active or passive) must be
disabled on all other ports on the switch. To disable LACP active or passive on the switch’s
ports, use this command syntax:
no int e < port-numbers > lacp
■ GVRP must be disabled (the default).
■ IGMP operates only in non-data-driven mode, and works only on uplink ports. The switch
floods multicast IP traffic arriving at non-uplink ports.
■ A Series 2500 switch with port-isolation enabled cannot export its port-isolation configura-
tion. However, a Series 2500 configuration file on a server can include port-isolation
commands.
■ The Isolated Port Groups feature operates within the context of the individual switch. It does
not restrict free communication on the designated uplink port(s) to other devices on the
network. A node connected to any non-local port (group1, group2, private, etc.) on one Series
2500 switch can communicate with a node connected to any non-local port (group1, group2,
private, etc.) on another Series 2500 switch if the two switches are connected through their
uplink ports.
■ Enabling port isolation and configuring individual ports to specific, non-default modes are
separate steps. You must first enable port isolation. When you do so, all ports are configured
in the (default) Uplink mode.