How to configure Port Isolation on Smart and L2 Managed Switches using the new GUI

T1600G-18TS( V2 V3 ) , T1500G-10PS( V2 ) , T1600G-28TS( V3 ) , T1500G-10MPS( V2 ) , T2600G-28MPS( V3 ) , T1600G-52PS( V3 ) , T1500G-8T( V2 ) , T1600G-52TS( V3 ) , T2600G-28TS( V3 ) , T2600G-28SQ , T1600G-28PS( V3 ) , T1700X-16TS( V3 )
Recent updates may have expanded access to feature(s) discussed in this FAQ. Visit your product's support page, select the correct hardware version for your device, and check either the Datasheet or the firmware section for the latest improvements added to your product. Please note that product availability varies by region, and certain models may not be available in your region.
This article applies to:
T1500G-10PS v2 or above, T1500G-8T v2 or above, T1500G-10MPS v2 or above, T1500-28PCT v3 or above, T1600G-52TS v3 or above, T1600G-52PS v3 or above, T1600G-28PS v3 or above, T1600G-28TS v3 or above, T1600G-18TS v2 or above, T1700X-16TS, T2600G-52TS v3 or above, T2600G-28TS v3 or above, T2600G-28MPS v3 or above, T2600G-28SQ v1 or above.
Port Isolation is used to limit data transmission between ports. In Port Isolation, you can define a Forwarding Port List for each port. And the port can send data only to the ports in the list. Packets sent to the other ports will be dropped.
Here is an application example for Port Isolation. Host A, B, C are connected to port 1, 2 and 3 respectively. Server A and server B are connected to port 4 and port 5 respectively. It is required that Host A, B and C cannot communicate with each other; Host A can visit both server A and server B, while host B and host C can only visit server A.
Configuration Scheme:
To meet the requirement, you can define different Forwarding Port List for each port. Note that since communications are bidirectional, if you want two ports communicate normally, they need to be in each other’s forwarding lists.
Port |
Forwarding Port List |
Port 1 |
Port 4, 5 |
Port 2 |
Port 4 |
Port 3 |
Port 4 |
Port 4 |
Port 1, 2, 3 |
Port 5 |
Port 1 |
Step 1:
Go to L2 Features > Switching > Port > Port Isolation page, click to load the following configuration page. Choose port 1 in the Port section, and choose port 4 and port 5 in the Forwarding Port List section. Then click Apply.
Step 2:
Click to load the following configuration page. Choose port 2 in the Port section, and choose port 4 in the Forwarding Port List section. Then click Apply.
Step 3:
Click to load the following configuration page. Choose port 3 in the Port section, and choose port 4 in the Forwarding Port List section. Then click Apply.
Step 4:
Click to load the following configuration page. Choose port 4 in the Port section, and choose port 1, 2 and 3 in the Forwarding Port List section. Then click Apply.
Step 4:
Click to load the following configuration page. Choose port 5 in the Port section, and choose port 1 in the Forwarding Port List section. Then click Apply.
Is this faq useful?
Your feedback helps improve this site.
What’s your concern with this article?
- Dissatisfied with product
- Too Complicated
- Confusing Title
- Does not apply to me
- Too Vague
- Other
Thank you
We appreciate your feedback.
Click here to contact TP-Link technical support.

TP-Link Community
Still need help? Search for answers, ask questions, and get help from TP-Link experts and other users around the world.
This website uses cookies to improve website navigation, analyze online activities and have the best possible user experience on our website. You can object to the use of cookies at any time. You can find more information in our privacy policy . Don’t show again
This website uses cookies to improve website navigation, analyze online activities and have the best possible user experience on our website. You can object to the use of cookies at any time. You can find more information in our privacy policy . Don’t show again
Basic Cookies
These cookies are necessary for the website to function and cannot be deactivated in your systems.
TP-Link
SESSION, JSESSIONID, accepted_local_switcher, tp_privacy_base, tp_privacy_marketing, tp_smb-select-product_scence, tp_smb-select-product_scenceSimple, tp_smb-select-product_userChoice, tp_smb-select-product_userChoiceSimple, tp_smb-select-product_userInfo, tp_smb-select-product_userInfoSimple, tp_top-banner, tp_popup-bottom, tp_popup-center, tp_popup-right-middle, tp_popup-right-bottom, tp_productCategoryType
Youtube
id, VISITOR_INFO1_LIVE, LOGIN_INFO, SIDCC, SAPISID, APISID, SSID, SID, YSC, __Secure-1PSID, __Secure-1PAPISID, __Secure-1PSIDCC, __Secure-3PSID, __Secure-3PAPISID, __Secure-3PSIDCC, 1P_JAR, AEC, NID, OTZ
Zendesk
OptanonConsent, __cf_bm, __cfruid, _cfuvid, _help_center_session, _pendo___sg__.<container-id>, _pendo_meta.<container-id>, _pendo_visitorId.<container-id>, _zendesk_authenticated, _zendesk_cookie, _zendesk_session, _zendesk_shared_session, ajs_anonymous_id, cf_clearance
Analysis and Marketing Cookies
Analysis cookies enable us to analyze your activities on our website in order to improve and adapt the functionality of our website.
The marketing cookies can be set through our website by our advertising partners in order to create a profile of your interests and to show you relevant advertisements on other websites.
Google Analytics & Google Tag Manager
_gid, _ga_<container-id>, _ga, _gat_gtag_<container-id>
Google Ads & DoubleClick
test_cookie, _gcl_au