This presentation describes the different mechanisms that z/OS provides to facilitate network segmentation. 

• Why segment your network?
• Physical segmentation
• Virtual segmentation
  • Virtual IP addresses
  • VLANs
  • Subplexing
• Logical segmentation
  • Network-based firewalls
  • IP packet filtering
  • Routing tables
  • What about zCX and z/OS Container Platform?
  • NETACCESS and PORTACCESS rules
  • Multiple TCP/IP stacks

Acknowledgements

The following members of the z/OS Communications Server team contributed to this presentation:

• Chris Meyer
• Navya Ramanjulu
• Jerry Stevens
• Randy Kunkel