Protected Ports

Private VLAN Edge (Protected Ports) provides switch port isolation without using Private VLANs.

The switch doesn’t allow direct traffic between two protected ports.

Less configuration is required than for Private VLANs, but it supports only a single switch.

Gateway is not connected to a protected port.

int Fa0/2
  switchport mode access
  switchport access vlan 100
  switchport protected

int Fa0/3
  switchport mode access
  switchport access vlan 100
  switchport protected