Brocade Network OS NETCONF Operations Guide v4.1.1 - Manual (Page 393)

Network OS NETCONF Operations Guide 361
53-1003231-02
Configuring all xSTP on DCB interface ports
24
Guard root protects the root bridge from malicious attacks and unintentional misconfigurations in
which a bridge device that is not intended to be the root bridge becomes the root bridge. Such
attacks can cause severe bottlenecks in the data path. Guard root ensures that the port on which it
is enabled is a designated port. If the guard root-enabled port receives a superior BPDU, it goes to
a discarding state.
To enable the guard root on a DCB interface, perform the following steps.
1. Issue the RPC to configure the interface node in the
urn:brocade.com:mgmt:brocade-interface namespace.
2. Under the node, include the , ,
, , or node element.
3. Under the , , ,
, or node element, include the following elements.
a. In the element, specify the interface name in [rbridge-id/]slot/port format or
port-channel number.
b. In the element, include the delete operation in the element tag to enable the
port.
c. Include the node element, which resides in the
urn:brocade.com:mgmt:brocade-xstp namespace.
4. Under the node element, include the node element.
5. Under the node, include the empty element to enable the guard root on the
DCB interface.
22/0/1
operation="delete"/>