C
HAPTER
39
| VLAN Commands
Configuring Port-based Traffic Segmentation
– 1130 –
COMMAND MODE
Privileged Exec
EXAMPLE
Console#show vlan-translation
Interface Old VID New VID
--------- ------- -------
Eth 1/ 1 10 100
Console#
CONFIGURING PORT-BASED TRAFFIC SEGMENTATION
If tighter security is required for passing traffic from different clients
through downlink ports on the local network and over uplink ports to the
service provider, port-based traffic segmentation can be used to isolate
traffic for individual clients.
Traffic belonging to each client is isolated to the allocated downlink ports.
But the switch can be configured to either isolate traffic passing across a
client’s allocated uplink ports from the uplink ports assigned to other
clients, or to forward traffic through the uplink ports used by other clients,
allowing different clients to share access to their uplink ports where
security is less likely to be compromised.
traffic-segmentation This command enables traffic segmentation. Use the no form to disable
traffic segmentation.
SYNTAX
[no] traffic-segmentation
DEFAULT SETTING
Disabled
Table 138: Commands for Configuring Traffic Segmentation
Command Function Mode
traffic-segmentation Enables traffic segmentation GC
traffic-segmentation session Creates a client session GC
traffic-segmentation uplink/
downlink
Configures uplink/downlink ports for client sessions GC
traffic-segmentation uplink-
to-uplink
Specifies whether or not traffic can be forwarded
between uplink ports assigned to different client
sessions
GC
show traffic-segmentation Displays the configured traffic segments PE
To Next Page