Enterasys D-Series

Configuring Protected Ports
6-50 Port Configuration
Configuring Protected Ports
TheProtectedPortfeatureisusedtopreventportsfromforwardingtraffictoeachother,even
whentheyareonthesameVLAN.Portsmaybedesignatedaseitherprotectedorunprotected.
Portsareunprotect edbydefault.Multiplegroupsofprotectedportsaresupported.
Protected Port Operation
Portsthatareconfiguredtobeprotectedcannotforwardtraffictootherprotectedportsinthe
samegroup,regardlessofhavingthesameVLANmembership.However,protectedportscan
forwardtraffictoportswhichareunprotected(notlistedinanygroup).Protectedportscanalso
forwardtraffictoprotectedportsin
adifferentgroup,iftheyareinthesameVLAN.Unprotected
portscanforwardtraffictobothprotectedandunprotectedports.Aportmaybelongtoonlyone
groupofprotectedports.
Thisfeatureonlyappliestoportswithinaswitch.Itdoesnotapplyacrossmultipleswitchesina
network.
Commands
set port protected
Usethiscommandtospecifyaporttobeprotectedandassigntheporttoagroupofprotected
ports.Aportcanbeassignedtoonlyonegroup.
Syntax
set port protected port-string group-id
Parameters
Defaults
None.
Mode
Switchcommand,read‐write.
For information about... Refer to page...
set port protected 6-50
show port protected 6-51
clear port protected 6-51
set port protected name 6-52
show port protected name 6-52
clear port protected name 6-53
port‐string Specifiestheportorportstobeprotected.
group‐id Specifiestheidofthegrouptowhichtheportsshouldbeassigned.Idcan
rangefrom0to2.