Table of Contents
Advertisement
18 Extended VLAN Functionality
18.3 Description of the inter-port relay blocking functionality
18.3.1 Overview
The inter-port relay blocking functionality blocks communication on all specified ports. This
can improve security when applied to connections with servers for which only access from
specific ports is allowed, and connections with terminals for which direct communication is
to be blocked.
The figure below shows an example application. In this example, the administrator server
blocks access from normal terminals, allowing access only from the administrator terminal.
Also, direct communication between terminals is blocked, to enhance the security of each
terminal.
Figure 18-2 Example application of the inter-port relay blocking functionality
18.3.2 Notes on using the inter-port relay blocking functionality
(1) Ports to be blocked
The inter-port relay blocking operates on ports that are not registered in channel groups.
(2) Notes on use with other functionality
The following table describes the operation when inter-port relay blocking is used
concurrently with other functionality.
Table 18-2 Concurrent use of inter-port relay blocking and other functionality
Functionality
Spanning Tree
Protocol
288
Operation
When a Spanning Tree Protocol is run on a port that is blocking communication,
communication might not be possible anymore, depending on the topology.
Advertisement
Table of Contents
