Is there any practical difference between switched and dedicated ports, such as those on the 2100 vs the ones on the 4100? Conceptually, I'd assign a port or a VLAN to an interface and then make rules on that interface, right?