You are recommended to enable root guard on the designated ports of a root bridge.
Loop guard, root guard, and edge port settings are mutually exclusive. With one of these functions
enabled on a port, any of the other two functions cannot take effect even if you have configured it
on the port.
Configuration Prerequisites
MSTP runs normally on the switch.
Configuration procedure
Follow these steps to configure the root guard function in system view:
To do...
Enter system view
Enable the root guard function
on specified ports
Follow these steps to enable the root guard function in Ethernet port view:
To do...
Enter system view
Enter Ethernet port view
Enable the root guard function
on the current port
Configuration example
# Enable the root guard function on GigabitEthernet 1/0/1.
1)
Perform this configuration in system view
<Sysname> system-view
[Sysname] stp interface GigabitEthernet 1/0/1 root-protection
2)
Perform this configuration in Ethernet port view
<Sysname> system-view
[Sysname] interface GigabitEthernet 1/0/1
[Sysname-GigabitEthernet1/0/1] stp root-protection
Configuring Loop Guard
A switch maintains the states of the root port and other blocked ports by receiving and processing
BPDUs from the upstream switch. These BPDUs may get lost because of network congestions or
unidirectional link failures. If a switch does not receive BPDUs from the upstream switch for certain
Use the command...
system-view
stp interface interface-list
root-protection
Use the command...
system-view
Interface interface-type
interface-number
stp root-protection
1-36
Remarks
—
Required
The root guard function is
disabled by default.
Remarks
—
—
Required
The root guard function is
disabled by default.