华为交换机端口隔离

华为交换机端口隔离，实现的是交换机端口之间的不能互通，直接在每个接口下面配置port—isolate  enable命令。但是上联口不能配置port-isolate命令，下联口可以配置port-isolate命令。该命令是在同一vlan下的端口实现不能互通。

sysname 
#
 vlan batch 1 888 964
#
 bpdu enable
#
 cluster enable
 ntdp enable
 ntdp hop 16
 ndp enable
#
interface Ethernet0/0/1
 port default vlan 964
 loopback-detect enable
 loopback-detect action block
 port-isolate enable
 ntdp enable
 ndp enable
#
interface Ethernet0/0/2                   
 port default vlan 964
 loopback-detect enable
 loopback-detect action block
 port-isolate enable
 ntdp enable
 ndp enable
#
interface Ethernet0/0/3
 port default vlan 964
 loopback-detect enable
 loopback-detect action block
 port-isolate enable
 ntdp enable
 ndp enable
#
interface Ethernet0/0/4
 port default vlan 964
 loopback-detect enable
 loopback-detect action block
 port-isolate enable
 ntdp enable
 ndp enable
#                                         
interface Ethernet0/0/5
 port default vlan 964
 loopback-detect enable
 loopback-detect action block
 port-isolate enable
 ntdp enable
 ndp enable
#
interface Ethernet0/0/6
 port default vlan 964
 loopback-detect enable
 loopback-detect action block
 port-isolate enable
 ntdp enable
 ndp enable
#
interface Ethernet0/0/7
 port default vlan 964
 loopback-detect enable
 loopback-detect action block
 port-isolate enable
 ntdp enable
 ndp enable                               
#
interface Ethernet0/0/8
 port default vlan 964
 loopback-detect enable
 loopback-detect action block
 port-isolate enable
 ntdp enable
 ndp enable
#
interface Ethernet0/0/9
 port default vlan 964
 loopback-detect enable
 loopback-detect action block
 port-isolate enable
 ntdp enable
 ndp enable
#
interface Ethernet0/0/10
 port default vlan 964
 loopback-detect enable
 loopback-detect action block
 port-isolate enable
 ntdp enable                              
 ndp enable
#
interface Ethernet0/0/11
 port default vlan 964
 loopback-detect enable
 loopback-detect action block
 port-isolate enable
 ntdp enable
 ndp enable
#
interface Ethernet0/0/12
 port default vlan 964
 loopback-detect enable
 loopback-detect action block
 port-isolate enable
 ntdp enable
 ndp enable
#
interface Ethernet0/0/13
 port default vlan 964
 loopback-detect enable
 loopback-detect action block
 port-isolate enable                      
 ntdp enable
 ndp enable
#
interface Ethernet0/0/14
 port default vlan 964
 loopback-detect enable
 loopback-detect action block
 port-isolate enable
 ntdp enable
 ndp enable
#
interface Ethernet0/0/15
 port default vlan 964
 loopback-detect enable
 loopback-detect action block
 port-isolate enable
 ntdp enable
 ndp enable
#
interface Ethernet0/0/16
 port default vlan 964
 loopback-detect enable
 loopback-detect action block             
 port-isolate enable
 ntdp enable
 ndp enable
#
interface Ethernet0/0/17
 port default vlan 964
 loopback-detect enable
 loopback-detect action block
 port-isolate enable
 ntdp enable
 ndp enable
#
interface Ethernet0/0/18
 port default vlan 964
 loopback-detect enable
 loopback-detect action block
 port-isolate enable
 ntdp enable
 ndp enable
#
interface Ethernet0/0/19
 port default vlan 964
 loopback-detect enable                   
 loopback-detect action block
 port-isolate enable
 ntdp enable
 ndp enable
#
interface Ethernet0/0/20
 port default vlan 964
 loopback-detect enable
 loopback-detect action block
 port-isolate enable
 ntdp enable
 ndp enable
#
interface Ethernet0/0/21
 port default vlan 964
 loopback-detect enable
 loopback-detect action block
 port-isolate enable
 ntdp enable
 ndp enable
#
interface Ethernet0/0/22
 port default vlan 964                    
 loopback-detect enable
 loopback-detect action block
 port-isolate enable
 ntdp enable
 ndp enable
#
interface Ethernet0/0/23
 port default vlan 1
 loopback-detect enable
 loopback-detect action block
 port-isolate enable
 ntdp enable
 ndp enable
#
interface Ethernet0/0/24
 port default vlan 1
 loopback-detect enable
 loopback-detect action block
 port-isolate enable
 ntdp enable
 ndp enable
#
//上联端口G0/0/1
interface GigabitEthernet0/0/1            
 port default vlan 1
 port trunk allow-pass vlan 888 964
 negotiation auto
 loopback-detect enable
 loopback-detect action block
 ntdp enable
 ndp enable
#
//下联端口G0/0/2（下面还有一台交换机）
interface GigabitEthernet0/0/2
 port default vlan 1
 port trunk allow-pass vlan 888 964
 loopback-detect enable
 loopback-detect action block
 port-isolate enable
 ntdp enable
 ndp enable
#
interface NULL0
#
aaa
 authentication-scheme default
 #
 authorization-scheme default             
 #
 accounting-scheme default
 #
 domain default
 #