Enabling Root Guard - Cisco Catalyst 2960-XR Configuration Manual

Configuring Optional Spanning-Tree Features
DETAILED STEPS
Command or Action
Step 1
configure terminal
Example:
Switch# configure terminal
Step 2
spanning-tree etherchannel guard misconfig
Example:
Switch(config)# spanning-tree etherchannel guard
misconfig
Step 3
end
Example:
Switch(config)# end
What to Do Next
You can use the show interfaces status err-disabled privileged EXEC command to show which switch ports
are disabled because of an EtherChannel misconfiguration. On the remote device, you can enter the show
etherchannel summary privileged EXEC command to verify the EtherChannel configuration.
After the configuration is corrected, enter the shutdown and no shutdown interface configuration commands
on the port-channel interfaces that were misconfigured.
Related Topics
EtherChannel Guard, on page 89

Enabling Root Guard

Root guard enabled on an interface applies to all the VLANs to which the interface belongs. Do not enable
the root guard on interfaces to be used by the UplinkFast feature. With UplinkFast, the backup interfaces (in
the blocked state) replace the root port in the case of a failure. However, if root guard is also enabled, all the
backup interfaces used by the UplinkFast feature are placed in the root-inconsistent state (blocked) and are
prevented from reaching the forwarding state.
Note You cannot enable both root guard and loop guard at the same time.
You can enable this feature if your switch is running PVST+, Rapid PVST+, or MSTP.
This procedure is optional.
OL-29424-01
Catalyst 2960-XR Switch Layer 2 Configuration Guide, Cisco IOS Release 15.0(2)EX1
Enabling Root Guard
Purpose
Enters the global configuration mode.
Enables EtherChannel guard.
Returns to privileged EXEC mode.
99