Root Guard
Root Guard prevents an unauthorised switch from
advertising itself as a Root Bridge.
If a BPDU superior to the Root
Bridge is received on a port with Root Guard enabled, the port is placed in a root-inconsistent
state.
In this state, the port is essentially in a blocking state,
and will not forward frames. The port can still listen for BPDUs.
Root Guard is enabled on a per-port basis, and is disabled
by default:
Switch(config)# interface gi1/14
Switch(config-if)# spanning-tree guard root
Root Guard can automatically recover. As soon as superior
BPDUs are no longer received, the port will transition normally through STP
states.
For detailed explanation refer to the below links:
Refer to the Below videos with a nice explanation with example.
No comments:
Post a Comment
Note: only a member of this blog may post a comment.