windows datacenter firewall - micro segmentation

hello 

according to this topic "https://docs.microsoft.com/en-us/previous-versions/windows/server/dn920240(v=ws.12)", we can configure micro-segmentation security ok vswitch port not on vm  guest. am i right ? our major vm are linux ubuntu. 

i did not find any step-by-step guide that help me to setup MS SDN.