cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
259
Views
0
Helpful
2
Replies
Highlighted
Explorer

guard root on VPC port-channel

Hello, I'm trying to find an article that explains configuring root guard on VPC port-channels...which I cannot find anything on. 

I have a switch that connects to 2 nexus vpc peer link core switches via VPC (picture attached).  I want to make sure that this switch A does not become the root for any VLAN ever.  From my understanding, i should configure root guard on the interfaces trunks off the cores that connect to Switch A.  Are there any caveats for doing this on VPC port-channels?  So I go into Nexus A and configure the following:

 

 

conf t

int po12

spann tree guard root

 

then I repeat the same in the other Nexus B correct?

 

Thank you

2 REPLIES 2
Rising star

Re: guard root on VPC port-channel

 

 = The correct way is still to assign correct bridge priority to the intended root bridge (albeid per vlan or not) , stay away from root guard, controlled network management is better.

M.

VIP Expert

Re: guard root on VPC port-channel

Hi,

I agree that you should just make sure that nexus-a is the root for all vlans and nexus-b is the backup root to all vlans and leave the other switch at default stp priority. No need for guard root.

HTH

CreatePlease to create content
Content for Community-Ad
July's Community Spotlight Awards