Allied Telesis AT-8000S Series, Cli Reference Manual, Page: 261 / 304

VLAN Commands
Page 259
switchport protected
The switchport protected Interface Configuration mode command enables Private VLAN Edge, by overriding the
FDB decision, and sends all Unicast, Multicast and Broadcast traffic to an uplink port. To disable overriding the
FDB decision, use the no form of this command.
Syntax
switchport protected { ethernet port | port-channel port-channel-number }
no switchport protected
Parameters
•
port — Specifies the uplink Ethernet port.
•
port-channel-number — Specifies the uplink port-channel.
Default Configuration
Switchport protected is disabled.
Command Mode
Interface Configuration (Ethernet, port-channel) mode
User Guidelines
Private VLAN Edge (PVE) supports private communication by isolating PVE-defined ports and ensuring that all
Unicast, Broadcast and Multicast traffic from these ports is only forwarded to uplink port(s).
PVE requires only one VLAN on each device, but not on every port; this reduces the number of VLANs required
by the device. Private VLANs and the default VLAN function simultaneously in the same device.
The uplink must be a GE port.
Example
This example configures ethernet port 1/e8 as a protected port, so that all traffic is sent to its uplink (ethernet port
1/e9).
switchport mode
The switchport mode Interface Configuration mode command configures the VLAN membership mode of a port.
To return to the default configuration, use the no form of this command.
Syntax
switchport mode { access | trunk | general }
no switchport mode
Console(config)# interface ethernet 1/e8
Console(config-if)# switchport forbidden vlan add 234-256
Console(config-if)# exit
Console(config)# interface ethernet 1/e9
Console(config-if)# switchport protected ethernet 1/e8