Layer 2 Switching Commands 419
switchport protected
Use the switchport protected command in Interface Configuration mode to
configure a protected port. The groupid parameter identifies the set of
protected ports to which this interface is assigned. You can only configure an
interface as protected in one group. You are required to remove an interface
from one group before adding it to another group.
Port protection occurs within a single switch. Protected port configuration
does not affect traffic between ports on two different switches. No traffic
forwarding is possible between two protected ports. Ports in a protected group
will not forward traffic to other ports in the group.
Syntax
switchport protected groupid
no switchport protected
• groupid--Identifies which group this port will be protected in. (Range: 0-2)
Default Configuration
No protected switchports are defined.
Command Mode
Interface Configuration (Ethernet) mode
User Guidelines
When an interface is enabled for routing using the interface vlan command,
the port will no longer be operationally enabled as a protected port on the
interface. Likewise, making an interface a member of a LAG or a probe
(monitor session or RSPAN destination) port operationally disables port
protection.
Example
The following example configures Ethernet port 1/0/1 as a member of
protected group 1.
console(config)#interface gigabitethernet 1/0/1
console(config-if-Gi1/0/1)#switchport protected 1
To Next Page
Loading...
