Configure A Root Guard - Dell Force10 C150 Configuration Manual

Configure a Root Guard

Use the Root Guard feature in a Layer 2 MSTP network to avoid bridging loops.
You enable root guard on a per-port or per-port-channel basis.
FTOS Behavior: The following conditions apply to a port enabled with root guard:
•
•
•
•
•
To enable a root guard on an MSTP-enabled port or port-channel interface, enter the
rootguard
guard feature.
Task
Enable root guard on a port or port-channel interface.
To disable MSTP root guard on a port or port-channel interface, enter the
command in an interface configuration mode.
To verify the MSTP root guard configuration on a port or port-channel interface, enter the
spanning-tree msti [instance-number] guard
652 | Multiple Spanning Tree Protocol
Root guard is supported on any MSTP-enabled port or port-channel interface except when used as a
stacking port.
Root guard is supported on a port in any Spanning Tree mode:
• Spanning Tree Protocol
• Rapid Spanning Tree Protocol
• Multiple Spanning Tree Protocol
• Per-VLAN Spanning Tree Plus
When enabled on a port, root guard applies to all VLANs configured on the port.
Root guard and loop guard cannot be enabled at the same time on an MSTP port. For example, if you
configure loop guard on a port on which root guard is already configured, the following error message is
displayed:
% Error: RootGuard is configured. Cannot configure LoopGuard.
When used in an MSTP network, if root guard blocks a boundary port in the CIST, the port is also blocked
in all other MST instances.
command. Refer to STP Root Guard on page 1060
(STP)
(RSTP)
(MSTP)
(PVST+)
for more information on how to use the root
Command Syntax
spanning-tree mstp rootguard
command in global configuration mode.
spanning-tree mstp
Command Mode
INTERFACE
INTERFACE
PORT-CHANNEL
no spanning-tree mstp rootguard
show