No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


S12700 V200R013C00 Command Reference

This document describes all the configuration commands of the device, including the command function, syntax, parameters, views, default level, usage guidelines, examples, and related commands.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
user-isolate (traffic profile view)

user-isolate (traffic profile view)


The user-isolate command enables user isolation.

The undo user-isolate command disables user isolation.

By default, user isolation is disabled in a traffic profile.


user-isolate l2

undo user-isolate






Indicates user isolation at Layer 2 and communication at Layer 3.



Traffic profile view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

In a traffic profile, user isolation prevents packets of users on a VAP from being forwarded to each other. That is, users on a VAP cannot communicate with each other after user isolation is enabled. This improves user communication security and enables the gateway to centrally forward user traffic, facilitating user management.

  • In tunnel forwarding mode, user isolation in the traffic profile implements Layer 2 or Layer 3 isolation for all users on a VAP.
  • In direct forwarding mode, when enabling user isolation in the traffic profile, it is recommended that port isolation be deployed on the access switch port connected to the AP.


Layer 2 user isolation in a VAP takes effect only for unicast packets.


# Configure Layer 2 isolation and Layer 3 communication in the traffic profile p1.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] traffic-profile name p1
[HUAWEI-wlan-traffic-prof-p1] user-isolate l2
Warning: Enabling user isolation may interrupt services. Are you sure you want to continue? [Y/N]:y
Updated: 2019-04-09

Document ID: EDOC1100065659

Views: 126485

Downloads: 88

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Previous Next