high-secure enable

Protect the switch against IP packets with illegal IP addresses such as loopback addresses or a source IP address of ones, or Class D or Class E addresses from being routed.

Syntax

default high-secure
default high-secure enable
default high-secure port {slot/port[/sub-port][-slot/port[/sub-port]][,...][slot/all][all]}
default high-secure port {slot/port[/sub-port][-slot/port[/sub-port]][,...][slot/all][all]} enable
high-secure
high-secure enable
high-secure port {slot/port[/sub-port][-slot/port[/sub-port]][,...][slot/all][all]}
high-secure port {slot/port[/sub-port][-slot/port[/sub-port]][,...][slot/all][all]} enable
no high-secure
no high-secure enable
no high-secure port {slot/port[/sub-port][-slot/port[/sub-port]][,...][slot/all][all]}
no high-secure port {slot/port[/sub-port][-slot/port[/sub-port]][,...][slot/all][all]} enable

Command Parameters

enable

Enables the high secure feature that blocks packets with illegal IP addresses. This flag is disabled by default.

port {slot/port[/sub-port][-slot/port[/sub-port]][,...][slot/all][all]}

Identifies the slot and port in one of the following formats:

a single slot and port (slot/port)
a range of slots and ports (slot/port-slot/port)
a series of slots and ports (slot/port,slot/port,slot/port)
all ports on the same slot (slot/all)
all ports on the switch (all)

If the platform supports channelization and the port is channelized, you must also specify the sub-port in the format slot/port/sub-port.

Default

None

Command Mode

GigabitEthernet Interface Configuration