【说明】同一台二层交换机设备（即接入层）相同Vlan间的端口隔离
案例说明：
二层交换机的1~10号端口划分给vlan6,PC1~pc10分别接在1~10号交换机端口号，要求pc1~pc10之间不可以互相访问。
重用命令：port-isolate enable

[hexin-GigabitEthernet0/0/1] port-isolate enable /* 等同于：port-isolate enable group 1，enable后如果不在指定Group分组号，则默认为group 1
[hexin-GigabitEthernet0/0/2] port-isolate enable
[hexin-GigabitEthernet0/0/3] port-isolate enable
[hexin-GigabitEthernet0/0/4] port-isolate enable
[hexin-GigabitEthernet0/0/5] port-isolate enable
[hexin-GigabitEthernet0/0/6] port-isolate enable
[hexin-GigabitEthernet0/0/7] port-isolate enable
[hexin-GigabitEthernet0/0/8] port-isolate enable
[hexin-GigabitEthernet0/0/9] port-isolate enable
[hexin-GigabitEthernet0/0/10] port-isolate enable
或
[hexin-GigabitEthernet0/0/1] port-isolate enable group 6
[hexin-GigabitEthernet0/0/2] port-isolate enable group 6
[hexin-GigabitEthernet0/0/3] port-isolate enable group 6
[hexin-GigabitEthernet0/0/4] port-isolate enable group 6
[hexin-GigabitEthernet0/0/5] port-isolate enable group 6
[hexin-GigabitEthernet0/0/6] port-isolate enable group 6
[hexin-GigabitEthernet0/0/7] port-isolate enable group 6
[hexin-GigabitEthernet0/0/8] port-isolate enable group 6
[hexin-GigabitEthernet0/0/9] port-isolate enable group 6
[hexin-GigabitEthernet0/0/10] port-isolate enable group 6