<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# Configuring Network Segmentation — API & Tool Reference

> Quick reference for tools, commands, and APIs used in configuring-network-segmentation.

## Tools


### `ip`

Linux network interface and VLAN management

**Usage:**
```bash
ip link add link <parent> name <parent>.<id> type vlan id <id>
```

**Key Flags:**
  - `-j: JSON output`
  - `link show: list interfaces`
  - `addr show: list addresses`

---

### `iptables`

Linux firewall rule management

**Usage:**
```bash
iptables -A FORWARD -i <in> -o <out> -p <proto> --dport <port> -j <target>
```

**Key Flags:**
  - `-A: append rule`
  - `-P: set policy`
  - `-L -n -v: list rules`
  - `--line-numbers: show rule numbers`

---

### `nmap`

Network scanner for segmentation testing

**Usage:**
```bash
nmap -sT -p <ports> <target>
```

**Key Flags:**
  - `-sT: TCP connect scan`
  - `-sn: ping scan`
  - `--open: show only open`
  - `-oG: grepable output`

---


## Integration Notes

- All tools should be run with least-privilege access appropriate to the task
- Log all tool invocations for audit trail
- Validate tool output before acting on results
- Cross-reference findings with multiple tools where possible

## See Also

- Parent skill: [Network Security](../../../SKILL.md)
- Technique SKILL.md: [../SKILL.md](../SKILL.md)
