The management-port isolate enable command isolates management interfaces from service interfaces.
The undo management-port isolate enable command disables the function.
By default, management interface separation is enabled.
The management-port isolate enable command enables separation of the management interface to prevent unauthorized users from attacking the packet forwarding service. After the command is run, the switch forbids packet exchange between the management and service interfaces. That is, the packets received by the management interface will not be sent out through a service interface, and the packets received by a service interface will not be sent out through the management interface.
The interval between management-port isolate enable and undo management-port isolate enable command must be longer than 30 seconds.
When a version earlier than V200R005C02 (except V200R005C00SPC500) is upgraded to V200R005C02, a version later than V200R005C02, or V200R005C00SPC500, the undo management-port isolate enable configuration is automatically generated.