Protected Ports - Private VLAN Edge

Use Protected ports to isolate protected ports from other protected ports but allow traffic to unprotected ports.  Use when Private VLANs are not necessary.

Example of protected ports blocked between protected ports and unprotected ports.

Ping from protected ports 10.123.0.3 and 10.123.0.4 are blocked but ping to unprotected port of device 10.123.0.1 is allowed.  

interface GigabitEthernet0/2\
Description *** Device 10.123.0.3 connected to protected port ***
 switchport access vlan 123
 switchport mode access
 switchport protected
!
interface GigabitEthernet0/3
Description *** Device 10.123.0.4 connected to protected port ***
 switchport access vlan 123
 switchport mode access
 switchport protected