# port-isolation > The CRS switches support flexible multi-level isolation features, which can be used for user access control, traffic engineering and advanced security and network management. The isolation features provide an... ----------- ## interface/ethernet/switch/port-isolation **Syscap:** musicswitch **Type:** Directory The CRS switches support flexible multi-level isolation features, which can be used for user access control, traffic engineering and advanced security and network management. The isolation features provide an organized fabric structure allowing the user to easily program and control the access by port, MAC address, VLAN, protocol, flow, and frame type. The following isolation and leakage features are supported: - Port-level isolation - MAC-level isolation - VLAN-level isolation - Protocol-level isolation - Flow-level isolation - Free combination of the above Port-level isolation supports different control schemes on the source port and destination port. Each entry can be programmed with access control for either the source port or the destination port. - When the entry is programmed with source port access control, the entry is. applied to the ingress packets. - When the entry is programmed with destination port access control, the entry is applied to the egress packets. Isolated/leaked ports. Lookup type of the isolation/leakage entry: - src - Entry applies to ingress packets of the ports. - dst - Entry applies to egress packets of the ports. Matching traffic forwarding type on Cloud Router Switch. Matching traffic type. Registration status for matching packets. Known ones are present in UFDB and MFDB, and unknown ones are not. Included protocols for isolation/leakage. Matching MAC isolation/leakage profile. Matching Port isolation/leakage profile. Matching VLAN isolation/leakage profile. ## interface/ethernet/switch/port-isolation **Syscap:** rbswitch **Type:** Directory