Protected ports

VLAN VLANVLAN.
Protected ports have these features: A protected port does not forward any traffic (unicast, multicast, or broadcast) to any other port that is also a protected port. Data traffic cannot be forwarded between protected ports at Layer 2; only control traffic, such as PIM packets, is forwarded because these packets are processed by the CPU and forwarded in software. All data traffic passin免费云主机域名g between protected ports must be forwarded through a Layer 3 device. Forwarding behavior between a protected port and a nonprotected port proceeds as usual.
You can configure protected ports on a physical interface (for example, Gigabit Ethernet port 1) or an EtherChannel group (for example, port-channel 5). When you enable protected ports for a port channel, it is enabled for all ports in the port-channel group.
Do not configure a private-VLAN port as a protected port. Do not configure a protected port as a private-VLAN port. A private-VLAN isolated port does not forward traffic to other isolated ports or community ports. For more information about private VLANs
feature.
sw1(config-if)#switchport protected ..

相关推荐: lcx端口转发实现内网突破

Topology：Web Server—-FireWall(NAT)—-Internet(One Server:Web Server can connect)—-My PC。One Server是一台可以连接的服务器。这台服务器也可以是My PC。…