This table is used to configure the port isolation feature. For a given port, user can configure the list of allowed forwarding/egress ports, where the packets for particular vlan that ingress the port can be forwarded. If the Vlan is not given, then the rule will be applied for all packets that ingress the given port. This table can be configured only for physical and link aggregated ports. Before a packet is sent out of a port (after all L2/L3 processing), port isolation table entry is referred for the ingress port of that packet. If an entry is present for that ingress port and if the outgoing port is configured as one of the egress ports , then the packet will be transmitted out of that outgoing port. Otherwise the packet will be dropped. If there is no entry configured for that ingress port in this table, then the packet will be transmitted on that outgoing port.