D-Link DGS-6600-48T Product Manual - Page 900

DGS-6604 m traffic-segmentation forward traffic-segmentation forward Use this command to segment or restrict the flooding domain of a port to a set of specified ports. Use the no form of this command to remove some ports from the forwarding domain. traffic-segmentation forward interface INTERFACE-ID [, | -] no traffic-segmentation [ forward [ interface INTERFACE-ID [, | -] ] ] Syntax Description forward Specifies the list of egress ports as the forwarding domain. interface INTERFACE-ID Specifies the ID of an interface as the allowable interfaces to go to. The allowed interfaces include physical ports and port channels. , (Optional) Specifies a series of interfaces, or separate a range of interfaces from a previous range. No space before and after the comma. - (Optional) Specifies a range of interfaces. No space before and after the hyphen. Default Command Mode Usage Guideline No segmentation configured. All ports are in the forwarding domain. Interface configuration Only physical ports and port channel interfaces are valid for this configuration. Traffic segmentation allows a VLAN to be futher divided into smaller groups of ports to provide increased security support. The flooding domain for this feature is determined by both the VLAN domain and traffic segmentation domains. This means the outgoing ports of the flooding member should be concurrently part of the VLAN and traffic segmentation. The command traffic-segmentation forward interface can be entered multiple times. The interfaces will be appended into the flowing domain. Similarly, this occurs when using the no traffic-segmentation forward interface command. The no form of the command will remove the specified interface from the trafficsegmentation forward member list. The traffic segmentation member list can be comprised of different interface types, for example eth3.1 can be with a port-channel in the same traffic segmentation list. If the forwarding interfaces specified by the command include a port-channel, all the member ports of this port-channel will be the forwarding interface in operation. If the specified port of the traffic-segmentation command is a member of a port-channel, the command will return an error message because of the different interface types. Since a port channel is an allowed interface in the member list, traffic segmentation is on the top link aggregation module. When any traffic segment member (physical interface) is configured to be a potential aggregated link port, it should be marked as an inactive interface and it will be treated as not existing in the forward interface list. Vice versa, if any port is removed from link aggregation, the removed port should be reset back to its default factory setting. CLI Reference Guide 890