VLAN Commands
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide
359
switchport protected
The
switchport protected
Interface Configuration mode command overrides the FDB
decision, and sends all Unicast, Multicast and Broadcast traffic to an uplink port. To
disable overriding the FDB decision, use the no form of this command..
Syntax
switchport protected
{
ethernet
port
|
port-channel
port-channel-number
}
no switchport protected
Parameters
•
port
— Specifies the uplink Ethernet port.
•
port-channel-number
— Specifies the uplink port-channel.
Default Configuration
Switchport protected is disabled.
Command Mode
Interface Configuration (Ethernet, port-channel) mode
User Guidelines
Private VLAN Edge (PVE) supports private communication by isolating PVE-defined
ports and ensuring that all Unicast, Broadcast and Multicast traffic from these ports is only
forwarded to uplink port(s).
PVE requires only one VLAN on each device, but not on every port; this reduces the
number of VLANs required by the device. Private VLANs and the default VLAN function
simultaneously in the same device.
Example
This example configures ethernet port 8 as a protected port, so that all traffic is sent to its
uplink (ethernet port 1).
Console(config)#
interface ethernet ext.1
Console(config-if)#
switchport forbidden vlan add
234-256
Console(config-if)#
exit
Console(config)#
interface ethernet
ext.1
Console(config-if)#
switchport protected ethernet ext.
1
