最终效果:
pc4不能ping通pc5,pc5能ping通pc4
pc1不能和pc2、pc3通,但pc2和pc3能互通
vlan batch 2
interface Vlanif1
ip address 10.0.0.254 255.255.255.0
interface Vlanif2
ip address 192.168.2.1 255.255.255.0
interface MEth0/0/1
interface GigabitEthernet0/0/1 //一个口子能加入多个隔离组
port-isolate enable group 1
port-isolate enable group 2
interface GigabitEthernet0/0/2
port-isolate enable group 1
interface GigabitEthernet0/0/3
port-isolate enable group 2
interface GigabitEthernet0/0/4
interface GigabitEthernet0/0/5
am isolate GigabitEthernet0/0/4
//配置单通4口的pc不能访问5口的pc,但5口可以访问4口的pc
interface GigabitEthernet0/0/6
port link-type access
port default vlan 2