Edge-Core ECS4810-12M Layer 2, Management Manual

Page: 957 / 1236

C
HAPTER
36
| VLAN Commands
Configuring Port-based Traffic Segmentation
– 957 –
D
EFAULT
S
ETTING
Disabled globally
No segmented port groups are defined.
C
OMMAND
M
ODE
Global Configuration
C
OMMAND
U
SAGE
◆
Traffic segmentation provides port-based security and isolation
between ports within the VLAN. Data traffic on the downlink ports can
only be forwarded to, and from, the designated uplink port(s). Data
cannot pass between downlink ports in the same segmented group, nor
to ports which do not belong to the same group.
◆
Any port can be defined as an uplink port or downlink port, but cannot
be configured to serve both roles.
◆
Traffic segmentation and normal VLANs can exist simultaneously within
the same switch. Traffic may pass freely between uplink ports in
segmented groups and ports in normal VLANs.
◆
Enter the traffic-segmentation command without any parameters to
enable traffic segmentation. Then set the interface members for
segmented groups.
◆
Enter no traffic-segmentation to disable traffic segmentation and
clear the configuration settings for segmented groups.
E
XAMPLE
This example enables traffic segmentation, and then sets port 10 as the
uplink and ports 5-8 as downlinks.
Console(config)#traffic-segmentation
Console(config)#traffic-segmentation uplink ethernet 1/10
downlink ethernet 1/5-8
Console(config)#
show traffic-
segmentation
This command displays the configured traffic segments.
C
OMMAND
M
ODE
Privileged Exec
E
XAMPLE
Console#show traffic-segmentation
Private VLAN status: Disabled
Up-link Port:
Ethernet 1/12
Down-link Port:
Ethernet 1/5
Ethernet 1/6
Ethernet 1/7