Chapter 16
| Spanning Tree Commands
– 388 –
spanning-tree
root-guard
This command prevents a designated port from taking superior BPDUs into
account and allowing a new STP root port to be elected. Use the
no
form to disable
this feature.
Syntax
[
no
]
spanning-tree
root-guard
Default Setting
Disabled
Command Mode
Interface Configuration (Ethernet, Port Channel)
Command Usage
◆
A bridge with a lower bridge identifier (or same identifier and lower MAC
address) can take over as the root bridge at any time.
◆
When Root Guard is enabled, and the switch receives a superior BPDU on this
port, it is set to the Discarding state until it stops receiving superior BPDUs for a
fixed recovery period. While in the discarding state, no traffic is forwarded
across the port.
◆
Root Guard can be used to ensure that the root bridge is not formed at a
suboptimal location. Root Guard should be enabled on any designated port
connected to low-speed bridges which could potentially overload a slower link
by taking over as the root port and forming a new spanning tree topology. It
could also be used to form a border around part of the network where the root
bridge is allowed.
◆
When spanning tree is initialized globally on the switch or on an interface, the
switch will wait for 20 seconds to ensure that the spanning tree has converged
before enabling Root Guard.
Example
Console(config)#interface ethernet 1/5
Console(config-if)#spanning-tree edge-port
Console(config-if)#spanning-tree root-guard
Console(config-if)#
Summary of Contents for EX-3524
Page 2: ......
Page 28: ...Figures 28 ...
Page 34: ...Section I Getting Started 34 ...
Page 58: ...Chapter 1 Initial Switch Configuration Setting the System Clock 58 ...
Page 72: ...Chapter 2 Using the Command Line Interface CLI Command Groups 72 ...
Page 156: ...Chapter 5 SNMP Commands Notification Log Commands 156 ...
Page 164: ...Chapter 6 Remote Monitoring Commands 164 ...
Page 218: ...Chapter 7 Authentication Commands Management IP Filter 218 ...
Page 268: ...Chapter 8 General Security Measures Port based Traffic Segmentation 268 ...
Page 292: ...Chapter 9 Access Control Lists ACL Information 292 ...
Page 312: ...Chapter 10 Interface Commands Power Savings 312 ...
Page 324: ...Chapter 11 Link Aggregation Commands Trunk Status Display Commands 324 ...
Page 366: ...Chapter 15 Address Table Commands 366 ...
Page 428: ...Chapter 17 VLAN Commands Configuring Voice VLANs 428 ...
Page 572: ...Chapter 25 IP Interface Commands IPv6 Interface 572 ...
Page 578: ...Section I Appendices 578 ...