09-12-2013 06:26 AM - edited 03-07-2019 03:26 PM
Hi
If i connect a switch with better bpdu to a rootguard enabled switch port, the switchport will go root inconsistent state. and after a while when the new swicth ceased sending superior bpdus the rootguard enabled port will start forwarding.
I need to clarify what should happen next , whether it will allow the new switch to be part of Spanning tree topology and both ports will be transitioned to desiganted
Thanks in Advance..
Shanil
Solved! Go to Solution.
09-12-2013 06:35 AM
Shanil,
As you said, as long as it's receiving superior bpdu's, it will stay in a root-inconsistent state. Until the switch is modified to either a lower priority (lower <> better) than the switch with rootguard configured, it will stay in this state. Once you get the switch configured to a less preferred priority, then the switch will be able to come up and participate in STP.
For example, if the priority of your rootguard switch is 32768 with a mac of 1111.1111.1112 and the switch connected is 32768 with a mac of 1111.1111.1100, then the new switch is sending superior bpdus. You should change the new switch to a lower priority like 36864, so the mac address doesn't come into play. Once that's done, the switch would act as another extension to the network and participate in STP. The interconnected switch links from the newly added switch would show as a root port and the switch with root guard configured would show as a designated port leading to the new switch.
HTH,
John
*** Please rate all useful posts ***
09-12-2013 06:49 AM
Hello
All switchport should be part of spanning-tree!
The root guard feature is to stop the port its assigned to from becomming a root port, So any switch attaching to this port should not become the root bridge.
So as long as this "new switch" has an negotiated higher bridge ID, then traffic will be allowed across.
res
Paul
Please don't forget to rate any posts that have been helpful.
Thanks.
09-12-2013 06:35 AM
Shanil,
As you said, as long as it's receiving superior bpdu's, it will stay in a root-inconsistent state. Until the switch is modified to either a lower priority (lower <> better) than the switch with rootguard configured, it will stay in this state. Once you get the switch configured to a less preferred priority, then the switch will be able to come up and participate in STP.
For example, if the priority of your rootguard switch is 32768 with a mac of 1111.1111.1112 and the switch connected is 32768 with a mac of 1111.1111.1100, then the new switch is sending superior bpdus. You should change the new switch to a lower priority like 36864, so the mac address doesn't come into play. Once that's done, the switch would act as another extension to the network and participate in STP. The interconnected switch links from the newly added switch would show as a root port and the switch with root guard configured would show as a designated port leading to the new switch.
HTH,
John
*** Please rate all useful posts ***
09-12-2013 08:51 AM
Excellent its clear now. Thank you john
Shanil
Sent from Cisco Technical Support iPhone App
09-12-2013 06:49 AM
Hello
All switchport should be part of spanning-tree!
The root guard feature is to stop the port its assigned to from becomming a root port, So any switch attaching to this port should not become the root bridge.
So as long as this "new switch" has an negotiated higher bridge ID, then traffic will be allowed across.
res
Paul
Please don't forget to rate any posts that have been helpful.
Thanks.
09-12-2013 08:51 AM
Thank you paul
Sent from Cisco Technical Support iPhone App
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide