2-724
Catalyst 3750 Metro Switch Command Reference
OL-9645-10
Chapter 2 Catalyst 3750 Metro Switch Cisco IOS Commands
switchport protected
switchport protected
Use the
switchport protected
interface configuration command to isolate unicast, multicast, and
broadcast traffic at Layer 2 from other protected ports on the same switch. Use the
no
form of this
command to disable protection on the port.
switchport protected
no switchport protected
Syntax Description
This command has no arguments or keywords.
Defaults
No protected port is defined. All ports are nonprotected.
Command Modes
Interface configuration
Command History
Usage Guidelines
The switchport protection feature is local to the switch; communication between protected ports on the
same switch is possible only through a Layer 3 device. To prevent communication between protected
ports on different switches, you must configure the protected ports for unique VLANs on each switch
and configure a trunk link between the switches. A protected port is different from a secure port.
A protected port does not forward any unicast, multicast, or broadcast traffic to any other protected port.
A protected port continues to forward unicast, multicast, and broadcast traffic to unprotected ports and
vice versa.
Port monitoring does not work if both the monitor and monitored ports are protected ports.
Examples
This example shows how to enable a protected port on a port:
Switch(config)#
interface gigabitethernet1/0/2
Switch(config-if)#
switchport protected
You can verify your settings by entering the
show interfaces
interface-id
switchport
privileged EXEC
command.
Related Commands
Release
Modification
12.1(14)AX
This command was introduced.
Command
Description
switchport
Displays the administrative and operational status of a switching (nonrouting)
port, including port blocking and port protection settings.
Prevents unknown multicast or unicast traffic on the interface.