Configuring Port-Based Traffic Control
How to Configure Port-Based Traffic Control
Configuring Port Blocking
Blocking Flooded Traffic on an Interface
Note:
The interface can be a physical interface or an EtherChannel group. When you block multicast or unicast traffic for
a port channel, it is blocked on all ports in the port-channel group.
Command
1.
configure terminal
2.
interface interface-id
3.
switchport block multicast
4.
switchport block unicast
5.
end
Configuring Port Security
Enabling and Configuring Port Security
Command
1.
configure terminal
2.
interface interface-id
3.
switchport mode {access | trunk}
4.
switchport voice vlan vlan-id
5.
switchport port-security
Purpose
Enters global configuration mode.
Specifies the interface to be configured, and enters interface
configuration mode.
Blocks unknown multicast forwarding out of the port.
Note:
Only pure Layer 2 multicast traffic is blocked. Multicast
packets that contain IPv4 or IPv6 information in the header are
not blocked.
Blocks unknown unicast forwarding out of the port.
Returns to privileged EXEC mode.
Purpose
Enters global configuration mode.
Specifies the interface to be configured, and enters interface configuration
mode.
Sets the interface switchport mode as access or trunk. An interface in the
default mode (dynamic auto) cannot be configured as a secure port.
Enables voice VLAN on a port.
vlan-id—Specifies the VLAN to be used for voice traffic.
Enables port security on the interface.
456