388 Protected Ports Commands
Protected Ports Commands
This section describes commands you use to configure and view protected ports
on a switch. Protected ports do not forward traffic to each other, even if they are
on the same VLAN. However, protected ports can forward traffic to all
unprotected ports in their group. Unprotected ports can forward traffic to both
protected and unprotected ports. Ports are unprotected by default.
If an interface is configured as a protected port, and you add that interface to a
Port Channel or Link Aggregation Group (LAG), the protected port status
becomes operationally disabled on the interface, and the interface follows the
configuration of the LAG port. However, the protected port configuration for the
interface remains unchanged. Once the interface is no longer a member of a
LAG, the current configuration for that interface automatically becomes
effective.
switchport
protected (Global
Config)
Use this command to create a protected port group. The
groupid parameter
identifies the set of protected ports. Use the
name name pair to assign a name to
the protected port group. The name can be up to 32 alphanumeric characters long,
including blanks. The default is blank.
Port protection occurs within a single switch. Protected port configuration does
not affect traffic between ports on two different switches. No traffic forwarding is
possible between two protected ports.
no switchport
protected (Global
Config)
Use this command to remove a protected port group. The groupid parameter
identifies the set of protected ports. The
name keyword specifies the name to
remove from the group.
Default unprotected
Format
switchport protected
groupid
name
name
Mode Global Config
Format
no switchport protected
groupid
name
Mode Global Config