Switchport Protected - Cisco Catalyst 3560-X Command Reference Manual

switchport protected

switchport protected
Syntax Description
Defaults
Command Modes
Command History
Usage Guidelines
Examples
Catalyst 3750-X and 3560-X Switch Command Reference
2-896
Downloaded from www.Manualslib.com
Use the switchport protected interface configuration command on the switch stack or on a standalone
switch to isolate unicast, multicast, and broadcast traffic at Layer 2 from other protected ports on the
same switch. Use the no form of this command to disable protection on the port.
switchport protected
no switchport protected
This command has no arguments or keywords.
No protected port is defined. All ports are nonprotected.
Interface configuration
Release Modification
12.2(53)SE2 This command was introduced.
The switchport protection feature is local to the switch; communication between protected ports on the
same switch is possible only through a Layer 3 device. To prevent communication between protected
ports on different switches, you must configure the protected ports for unique VLANs on each switch
and configure a trunk link between the switches. A protected port is different from a secure port.
A protected port does not forward any traffic (unicast, multicast, or broadcast) to any other port that is
also a protected port. Data traffic cannot be forwarded between protected ports at Layer 2; only control
traffic, such as PIM packets, is forwarded because these packets are processed by the CPU and forwarded
in software. All data traffic passing between protected ports must be forwarded through a Layer 3 device.
Because a switch stack represents a single logical switch, Layer 2 traffic is not forwarded between any
protected ports in the switch stack, whether they are on the same or different switches in the stack.
Port monitoring does not work if both the monitor and monitored ports are protected ports.
This example shows how to enable a protected port on an interface:
Switch(config)# interface gigabitethernet1/0/2
Switch(config-if)# switchport protected
You can verify your settings by entering the show interfaces interface-id switchport privileged EXEC
command.
manuals search engine
Chapter 2 Catalyst 3750-X and 3560-X Cisco IOS Commands
OL-21522-02