Configuring Port-Based Traffic Segmentation; Pvlan; Table 4-72 Traffic Segmentation Commands; Table 4-73 Traffic Segmentation Forwarding - SMC Networks 8126PL2-F - annexe 1 Management Manual

Configuring Port-based Traffic Segmentation

If tighter security is required for passing traffic from different clients through downlink
ports on the local network and over uplink ports to the service provider, port-based
traffic segmentation can be used to isolate traffic for individual clients.
Local traffic belonging to each client is isolated to the allocated downlink ports, and
upstream traffic coming from the downlink ports can only be forwarded to, and from,
uplink ports.
This section describes commands used to configure traffic segmentation.
Command

pvlan

pvlan up-link/down-link
show pvlan
pvlan
This command enables port-based traffic segmentation. Use the no form to disable
this feature.
Syntax
[no] pvlan
Default Setting
Disabled
Command Mode
Global Configuration
Command Usage
• When traffic segmentation is enabled, the forwarding state for the uplink and
downlink ports is shown below.
Destination
Source
Downlink Ports
Uplink Ports
Normal Ports
• When traffic segmentation is disabled, all ports operate in normal forwarding
mode based on the settings specified by other functions such as VLANs and
spanning tree protocol.
Table 4-72 Traffic Segmentation Commands
Function
Enables traffic segmentation
Configures uplink/downlink ports for client sessions
Displays the configured private VLANS
Table 4-73 Traffic Segmentation Forwarding
Downlinks
Blocking
Forwarding
Forwarding
Uplinks
Forwarding
Forwarding
Forwarding
4
VLAN Commands
Mode Page
GC 4-233
GC 4-234
PE 4-234
Normal Ports
Blocking
Forwarding
Forwarding
4-233