Brocade BigIron RX Series Configuration Guide - Manual (Page 409)

BigIron RX Series Configuration Guide 331
53-1002484-04
IEEE 802.1D Spanning Tree Protocol (STP)
12
Once the port stops receiving superior BPDUs, root protect will automatically set the port back to a
FORWARDING state after the timeout period has expired.
NOTE
Root Guard may prevent network connectivity if improperly configured. It needs to be configured on
the perimeter of the network rather than the core. Also, Root Guard should be configured only on the
primary port of a LAG. If a port configured with Root Guard is made a secondary port, the LAG
deployment will be vetoed.
Enabling STP root guard
A STP Root Guard is configured on a per interfaces basis. To enable a Root Guard, enter a
command such as the following.
BigIron RX (config)# interface ethernet 5/5
BigIron RX(config-if-e10000-5/5)# spanning-tree root-protect
Syntax: [no] spanning-tree root-protect
Enter the no form of the command to disable STP Root Guard on the port.
Setting the STP root guard timeout period
To configure the STP Root protect timeout period globally, enter a command such as the following.
BigIron RX(config)# spanning-tree root-protect timeout 120
Syntax: spanning-tree root-protect timeout <timeout in seconds>
The timeout in seconds parameter allows you to set the timeout period. The timeout period may be
configured to anything between 5 and 600 seconds. Default is 30 seconds.
Checking if Root Guard is configured
To determine if Root Guard is configured, enter the following command.
BigIron RX# show interface ethernet 1/4
10GigabitEthernet1/4 is up, line protocol is up
STP Root Guard is enabled, STP BPDU Guard is disabled
Syntax: show interface ethernet <slot>/<port>
Displaying the STP root guard
To display the STP Root Guard state, enter the show spanning-tree root-protect command.
BigIron RX#show spanning-tree root-protect
Port VLAN Current State
13/6 3 Consistent state
13/9 2 Inconsistent state (29 seconds left on timer)
Syntax: show spanning-tree root-protect