Edge-Core ECS4810-12M Layer 2, Management Manual

Page: 956 / 1236

C
HAPTER
36
| VLAN Commands
Configuring Port-based Traffic Segmentation
– 956 –
E
XAMPLE
Console(config)#dot1q-tunnel system-tunnel-control
Console(config)#interface ethernet 1/1
Console(config-if)#switchport dot1q-tunnel mode access
Console(config-if)#switchport l2protocol-tunnel spanning-tree
Console(config-if)#
show l2protocol-
tunnel
This command shows settings for Layer 2 Protocol Tunneling (L2PT).
C
OMMAND
M
ODE
Privileged Exec
E
XAMPLE
Console#show l2protocol-tunnel
Layer 2 Protocol Tunnel
Tunnel MAC Address : 01-12-CF-00-00-00
Interface Protocol
----------------------------------------------------------
Eth 1/ 1 Spanning Tree
Console#
C
ONFIGURING
P
ORT
-
BASED
T
RAFFIC
S
EGMENTATION
If tighter security is required for passing traffic from different clients
through downlink ports on the local network and over uplink ports to the
service provider, port-based traffic segmentation can be used to isolate
traffic for individual clients.
traffic-segmentation
This command enables traffic segmentation globally, or configures the
uplink and down-link ports for a segmented group of ports. Use the no
form to disable traffic segmentation globally.
S
YNTAX
[ no ] traffic-segmentation [ uplink interface-list
downlink interface-list ]
uplink – Specifies an uplink interface.
downlink – Specifies a downlink interface.
Table 122: Commands for Configuring Traffic Segmentation
Command Function Mode
traffic-segmentation Enables and configures traffic segmentation GC
show traffic-
segmentation
Displays the configured traffic segments PE