VLAN Commands

switchport protected

The switchport protected Interface Configuration mode command overrides the FDB decision, and sends all Unicast, Multicast and Broadcast traffic to an uplink port. To disable overriding the FDB decision, use the no form of this command..

Syntax

switchport protected {ethernet port port-channel port-channel-number}

no switchport protected

Parameters

port— Specifies the uplink Ethernet port.

port-channel-number— Specifies the uplink port-channel.

Default Configuration

Switchport protected is disabled.

Command Mode

Interface Configuration (Ethernet, port-channel) mode

User Guidelines

Private VLAN Edge (PVE) supports private communication by isolating PVE-defined ports and ensuring that all Unicast, Broadcast and Multicast traffic from these ports is only forwarded to uplink port(s).

PVE requires only one VLAN on each device, but not on every port; this reduces the number of VLANs required by the device. Private VLANs and the default VLAN function simultaneously in the same device.

Example

This example configures ethernet port 8 as a protected port, so that all traffic is sent to its uplink (ethernet port 1).

Console(config)# interface ethernet ext.1

Console(config-if)#switchport forbidden vlan add 234-256

Console(config-if)# exit

Console(config)# interface ethernet ext.1

Console(config-if)#switchport protected ethernet ext.1

Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide

359

Page 375
Image 375
Intel SBCEGBESW10 CLI manual Switchport protected is disabled, Consoleconfig-if#switchport protected ethernet ext.1