Table 66: Commands For Configuring Traffic Segmentation; Port-Based Traffic Segmentation - Edge-Core ECS4120-28F Reference Manual

Port-based Traffic Segmentation

traffic-segmentation
If tighter security is required for passing traffic from different clients through
downlink ports on the local network and over uplink ports to the service provider,
port-based traffic segmentation can be used to isolate traffic for individual clients.
Traffic belonging to each client is isolated to the allocated downlink ports. But the
switch can be configured to either isolate traffic passing across a client's allocated
uplink ports from the uplink ports assigned to other clients, or to forward traffic
through the uplink ports used by other clients, allowing different clients to share
access to their uplink ports where security is less likely to be compromised.

Table 66: Commands for Configuring Traffic Segmentation

Command
traffic-segmentation
traffic-segmentation session
traffic-segmentation uplink/
downlink
traffic-segmentation uplink-to-
uplink
show traffic-segmentation
This command enables traffic segmentation. Use the no form to disable traffic
segmentation.
Syntax
[no] traffic-segmentation
Default Setting
Disabled
Command Mode
Global Configuration
Command Usage
◆
Traffic segmentation provides port-based security and isolation between ports
within the VLAN. Data traffic on the downlink ports can only be forwarded to,
and from, the designated uplink port(s). Data cannot pass between downlink
ports in the same segmented group, nor to ports which do not belong to the
same group.
◆
Traffic segmentation and normal VLANs can exist simultaneously within the
same switch. Traffic may pass freely between uplink ports in segmented groups
and ports in normal VLANs.
Chapter 9
Function
Enables traffic segmentation
Creates a client session
Configures uplink/downlink ports for client sessions
Specifies whether or not traffic can be forwarded
between uplink ports assigned to different client
sessions
Displays the configured traffic segments
– 355 –
| General Security Measures
Port-based Traffic Segmentation
Mode
GC
GC
GC
GC
PE