Dell PowerEdge M520 Dell Converged Enhanced Ethernet Command Reference - Page 203
Guard root protects the root bridge from malicious attacks and unintentional misconfigurations
View all Dell PowerEdge M520 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 203 highlights
spanning-tree guard root 11 spanning-tree guard root Enables the guard root to restrict which interface is allowed to be the spanning-tree root port or the path-to-the root for the switch. Synopsis spanning-tree guard root no spanning-tree guard root Operands none Defaults Guard root is disabled. Command Interface configuration mode Modes Description Use this command to enable the guard root on the interface. Use the no spanning-tree guard root command to disable guard root on the selected interface. Usage The root port provides the best path from the switch to the root switch. Guidelines Note Guard root protects the root bridge from malicious attacks and unintentional misconfigurations where a bridge device that is not intended to be the root bridge becomes the root bridge. This causes severe bottlenecks in the datapath. Guard root ensures that the port on which it is enabled is a designated port. If the guard root enabled port receives a superior Bridge Protocol Data Unit (BPDU), it goes to a discarding state. Examples To enable guard root: switch(conf-if-te-0/1)#spanning-tree guard root See Also spanning-tree cost Dell Converged Enhanced Ethernet Command Reference 187 53-1002115-01