![]() The root guard feature is configured on all downstream ports from your core and distribution layer switches. ![]() Where do you configure Spanning Tree Root Guard? This feature is used to protect your root bridges from misconfiguration or a layer 2 man in the middle attack. Unlike the BPDU Guard which will disable a port upon receipt of a BPDU, the Spanning Tree Root Guard feature will allow BPDU’s through a port to maintain the spanning tree topology, however if it receives a superior BPDU, which indicates that another switch is trying to become the root bridge it will err-disable the port.
0 Comments
Leave a Reply. |