C
HAPTER
33
| VLAN Commands
Configuring Port-based Traffic Segmentation
– 841 –
DEFAULT SETTING
Disabled globally
No segmented port groups are defined.
COMMAND MODE
Global Configuration
COMMAND USAGE
â—† Traffic segmentation provides port-based security and isolation
between ports within the VLAN. Data traffic on the downlink ports can
only be forwarded to, and from, the designated uplink port(s). Data
cannot pass between downlink ports in the same segmented group, nor
to ports which do not belong to the same group.
â—† Any port can be defined as an uplink port or downlink port, but cannot
be configured to serve both roles.
â—† Traffic segmentation and normal VLANs can exist simultaneously within
the same switch. Traffic may pass freely between uplink ports in
segmented groups and ports in normal VLANs.
â—† Enter the traffic-segmentation command without any parameters to
enable traffic segmentation. Then set the interface members for
segmented groups.
â—† Enter no traffic-segmentation to disable traffic segmentation and
clear the configuration settings for segmented groups.
EXAMPLE
This example enables traffic segmentation, and then sets port 12 as the
uplink and ports 5-8 as downlinks.
Console(config)#traffic-segmentation
Console(config)#traffic-segmentation uplink ethernet 1/12
downlink ethernet 1/5-8
Console(config)#
show traffic-
segmentation
This command displays the configured traffic segments.
COMMAND MODE
Privileged Exec
EXAMPLE
Console#show traffic-segmentation
Private VLAN status: Disabled
Up-link Port:
Ethernet 1/12
Down-link Port:
Ethernet 1/5
Ethernet 1/6
Ethernet 1/7
To Next Page
Loading...
Need help?
General