The interface must be a physical interface; virtual interfaces are not allowed.
The interface must be a switch interface. (On some platforms, some appliance interfaces are not connected to the switch. Such interfaces are not allowed.)
The interface cannot be a PortShield host (some other appliance interface cannot be portshielded to it) or a PortShield group member (cannot be portshielded to another appliance interface).
The interface cannot be a bridge primary or bridge secondary interface.
The interface cannot have any children (it cannot be a parent interface for other child interfaces).