Configuring Root Protection on an Interface

Due to incorrect configurations or malicious attacks on the network, a root bridge may receive BPDUs with a higher priority. Consequently, the legitimate root bridge is no longer able to serve as the root bridge and the network topology is changed, triggering spanning tree recalculation. This may also result in traffic that should be transmitted over high-speed links being transmitted over low-speed links, leading to network congestion. The root protection function on a switch preserves the role of the designated port in order to protect the root bridge.

Root protection takes effect only on designated ports.

Perform the following steps on the root bridge in an MST region.