Filter
Top Products
22-11
Catalyst 3750-X and 3560-X Switch Software Configuration Guide
OL-21521-01
Chapter 22 Configuring Optional Spanning-Tree Features
Configuring Optional Spanning-Tree Features
Figure 22-9 Root Guard in a Service-Provider Network
Understanding Loop Guard
You can use loop guard to prevent alternate or root ports from becoming designated ports because of a
failure that leads to a unidirectional link. This feature is most effective when it is enabled on the entire
switched network. Loop guard prevents alternate and root ports from becoming designated ports, and
spanning tree does not send BPDUs on root or alternate ports.
You can enable this feature by using the spanni
ng-tree loopguard default global configuration
command.
When the switch is operating in PVST+ or rapid-PVST+
mode, loop guard prevents alternate and root
ports from becoming designated ports, and spanning tree does not send BPDUs on root or alternate ports.
When the switch is operating in MST mode, BPDUs are not sent on nonboundary ports only if the
i
nterface is blocked by loop guard in all MST instances. On a boundary port, loop guard blocks the
interface in all MST instances.
Configuring Optional Spanning-Tree Features
These sections contain this configuration information:
• Default Optional Spanning-Tree Configuration, page 22-12
• Optional Spanning-Tree Configuration Guidelines, page 22-12
• Enabling Port Fast, page 22-12 (optional)
• Enabling BPDU Guard, page 22-13 (optional)
• Enabling BPDU Filtering, page 22-14 (optional)
• Enabling UplinkFast for Use with Redundant Links, page 22-15 (optional)
• Enabling Cross-Stack UplinkFast, page 22-16 (optional)
101232
Desired
root switch
Customer network
Potential
spanning-tree root without
root guard enabled
Enable the root-guard feature
on these interfaces to prevent
switches in the customer
network from becoming
the root switch or being
in the path to the root.
Service-provider network