(Optional) Configuring Unidirectional Isolation from the Access Side to the Tunnel Side

Context

On a VXLAN network, users in the same BD can directly communicate with each other. To isolate unidirectional traffic from the access side to the tunnel side in a BD, you can configure unidirectional isolation from the access side to the tunnel side.

Only the S6730-S, S6730S-S, S5732-H, S5731-S, S5731S-S, S5731S-H, S6730-H, S6730S-H, S5731-H, S5720-HI, S5730-HI, and S6720-HI switches support this configuration.

Procedure

Run system-view
The system view is displayed.
Run bridge-domain bd-id
The view of a created BD is displayed.
Run isolate remote enable
Unidirectional isolation from the access side to the tunnel side is enabled in the BD.

By default, unidirectional isolation from the access side to the tunnel side is disabled in a BD.