ECS4100 Series CLI Reference Guide-R07

Chapter 9 | General Security Measures
Port-based Traffic Segmentation
– 373 –
Example
Console(config)#traffic-segmentation session 1
Console(config)#
traffic-segmentation
uplink/downlink
This command configures the uplink and down-link ports for a segmented group of
ports. Use the no form to remove a port from the segmented group.
Syntax
[no] traffic-segmentation [session session-id] {uplink interface-list
[downlink interface-list] | downlink interface-list}
session-id – Traffic segmentation session. (Range: 1-4)
uplink – Specifies an uplink interface.
downlink – Specifies a downlink interface.
interface
ethernet unit/port
unit - Unit identifier. (Range: 1)
port - Port number. (Range: 1-12/26/28/52)
port-channel channel-id (Range: 1-16)
Default Setting
Session 1 if not defined
No segmented port groups are defined.
Command Mode
Global Configuration
Command Usage
◆ A port cannot be configured in both an uplink and downlink list.
◆ A port can only be assigned to one traffic-segmentation session.
◆ When specifying an uplink or downlink, a list of ports may be entered by using
a hyphen or comma in the port field. Note that lists are not supported for the
channel-id field.
◆ A downlink port can only communicate with an uplink port in the same session.
Therefore, if an uplink port is not configured for a session, the assigned
downlink ports will not be able to communicate with any other ports.
◆ If a downlink port is not configured for the session, the assigned uplink ports
will operate as normal ports.