isolation group
This command allows you to switch to the group/group of isolated ports configuration mode.
The function is not compatible with operation on model 1.
Syntax
isolation group <RANGE>
Parameters
<RANGE> – isolation group number, may take values [0..29].
Command mode
CONFIG
Example
ma4000(config)# isolation group 1 ma4000(pp4x-config-isolation-1)#
allow
This command adds interfaces to the port isolation group, with which information exchange in this group will be allowed.
The use of a negative form (no) of the command removes port/ports from port isolation group.
Syntax
[no] allow <INTERFACE> <RANGE>
Parameters
<INTERFACE> – interface type: front-port; port-channel; slot-channel. The description of interfaces is given in Table 4.1.
<RANGE> – interface number. The range of values and numbering rules are described in Table 4.1. If you specify the value 'all' in the command, all interfaces of the given type will be specified.
You may specify the list of numbers using comma ( , ) or specify the range using hyphen ( - ).
Command mode
ISOLATION GROUP
Example
ma4000(pp4x-config-isolation-2)# allow front-port 1/5
isolation enable
This command enables port isolation feature for configured VLAN ports.
The use of a negative form (no) of the command disables this feature.
Syntax
[no] isolation enable
Parameters
The command contains no arguments.
Command mode
VLAN
Example
ma4000(vlan-1)# isolation enable
isolation assign
This command is used to assign an isolation group for the interface globally in CONFIG mode or in VLAN mode for the interface of the configured VLAN.
The use of a negative form (no) of the command removes port from the group.
Syntax
[no] isolation assign <INTERFACE> <RANGE> group <GROUP RANGE>
Parameters
<INTERFACE> – interface type: front-port; port-channel; slot-channel. The description of interfaces is given in Table 4.1.
<RANGE> – interface number. The range of values and numbering rules are described in Table 4.1. If you specify the value 'all' in the command, all interfaces of the given type will be specified.
You may specify the list of numbers using comma ( , ) or specify the range using hyphen ( - ).
<GROUPRANGE> – port isolation group number, may take values [0..29].
Command mode
VLAN
CONFIG
Example
ma4000(config)# isolation assign front-port all group 1
show bridging
This command is used to view the port isolation settings.
Syntax
show bridging <INTERFACE> <RANGE>
Parameters
<INTERFACE> – interface type: front-port; gpon-port; ont; plc-front-port; plc-mgmt-pon-port; plc-pon-port; plc-slot-channel; plc-slot-port; port-channel; slot-channel; slot-port; stack-port. The description of interfaces is given in Table 4.1.
<RANGE> – interface number. The range of values and numbering rules are described in Table 4.1. If you specify the value 'all' in the command, all interfaces of the given type will be specified.
You may specify the list of numbers using comma ( , ) or specify the range using hyphen ( - ).
Command mode
ROOT
Example
ma4000# show bridging front-port 1/5
Bridging settings
~~~~~~~~~~~~~~~~~
Traffic restriction
Source Destination flag
-------------------- -------------------- --------------------
front-port 1/5 front-port 1/0 Allow
front-port 1/1 Allow
front-port 1/2 Allow
front-port 1/3 Allow
front-port 1/4 Allow
front-port 1/5 Allow
front-port 2/0 Allow
front-port 2/1 Allow
…
slot-channel 7 Allow
slot-channel 8 Allow
slot-channel 9 Allow
slot-channel 10 Allow
slot-channel 11 Allow
slot-channel 12 Allow
slot-channel 13 Allow
slot-channel 14 Allow
slot-channel 15 Allow
-------------------- -------------------- --------------------
show isolation vlans
This command allows to view the port isolation status by VLAN.
Syntax
show isolation vlans <VID>
Parameters
<VID> – VLAN ID, may take values [1 .. 4094].
Command mode
ROOT
Example
ma4000# show isolation vlans 1
Isolation per vlan:
~~~~~~~~~~~~~~~~~~~
Destination
VID State Interface group
---- -------- -------------------- ------------
1 disabled front-port 1/0 Any
front-port 1/1 Any
front-port 1/2 Any
front-port 1/3 Any
front-port 1/4 Any
front-port 1/5 Any
front-port 2/0 Any
front-port 2/1 Any
front-port 2/2 Any
front-port 2/3 Any
front-port 2/4 Any
front-port 2/5 Any
slot-channel 0 0
slot-channel 1 0
slot-channel 2 0
slot-channel 3 0
slot-channel 4 0
slot-channel 5 0
slot-channel 6 0
slot-channel 7 0
slot-channel 8 0
slot-channel 9 0
slot-channel 10 0
slot-channel 11 0
slot-channel 12 0
slot-channel 13 0
slot-channel 14 0
slot-channel 15 0
---- -------- -------------------- ------------
show isolation groups
This command allows to view the port isolation status by groups.
Syntax
show isolation groups <GROUP RANGE>
Parameters
<GROUPRANGE> – isolation group number, may take values [0 .. 29].
Command mode
ROOT
Example
ma4000# show isolation groups 1
Isolation groups:
~~~~~~~~~~~~~~~~~
Traffic restriction
Group Interface flag
------ -------------------- --------------------
1 front-port 1/0 Allow
front-port 1/1 Allow
front-port 1/2 Allow
front-port 1/3 Allow
front-port 1/4 Allow
front-port 1/5 Allow
front-port 2/0 Allow
front-port 2/1 Allow
front-port 2/2 Allow
front-port 2/3 Allow
front-port 2/4 Allow
front-port 2/5 Allow
slot-channel 0 Deny
slot-channel 1 Deny
slot-channel 2 Deny
slot-channel 3 Deny
slot-channel 4 Deny
slot-channel 5 Deny
slot-channel 6 Deny
slot-channel 7 Deny
slot-channel 8 Deny
slot-channel 9 Deny
slot-channel 10 Deny
slot-channel 11 Deny
slot-channel 12 Deny
slot-channel 13 Deny
slot-channel 14 Deny
slot-channel 15 Deny
------ -------------------- --------------------
show slot <SLOT> isolation vlans
This command allows to view the port isolation status by VLAN for PLC8 line cards.
Syntax
show slot <SLOT> isolation vlans <VID>
Parameters
<SLOT> – PLC8 module number, may take values (0..15). You may specify the list of numbers using comma ( , ) or specify the range using hyphen ( - ).
<VID> – VLAN ID, may take values [1 .. 4094].
Command mode
ROOT
Example
ma4000# show slot 6 isolation vlans 1
Isolation per vlan:
~~~~~~~~~~~~~~~~~~~
VID State Interface Destination group
---- -------- -------------------- --------------------
1 disabled plc-front-port 6/0 0
plc-pon-port 6/0 1
plc-pon-port 6/1 1
plc-pon-port 6/2 1
plc-pon-port 6/3 1
plc-pon-port 6/4 1
plc-pon-port 6/5 1
plc-pon-port 6/6 1
plc-pon-port 6/7 1
plc-slot-channel 6/0 0
---- -------- -------------------- --------------------
show show slot <SLOT> isolation groups
This command allows to view the port isolation status by groups for PLC8 line cards.
Syntax
show slot <SLOT> isolation groups <GROUP RANGE>
Parameters
<SLOT> – PLC8 module number, may take values (0..15). You may specify the list of numbers using comma ( , ) or specify the range using hyphen ( - ).
<GROUPRANGE> – isolation group number, may take values [0 .. 29].
Command mode
ROOT
Example
ma4000# show slot 6 isolation groups 1
Isolation groups:
~~~~~~~~~~~~~~~~~
Traffic restriction
Group Interface flag
------ -------------------- --------------------
1 plc-front-port 6/0 allow
plc-pon-port 6/0 deny
plc-pon-port 6/1 deny
plc-pon-port 6/2 deny
plc-pon-port 6/3 deny
plc-pon-port 6/4 deny
plc-pon-port 6/5 deny
plc-pon-port 6/6 deny
plc-pon-port 6/7 deny
plc-slot-channel 6/0 allow
------ -------------------- --------------------