External ports should be dedicated to a particular Tenant, L3C, L2BD (even if VLAN'd, these are logical sub-ports so still unique port).

May need to change external NodeConnectorId augmentation for node, and refactor PortSecurity/EgressMapper. See Todo with BUgID in code.