Configuring Root Protection on a Port

Due to incorrect configurations or malicious attacks on a network, a valid root bridge may receive BPDUs with a higher priority. Consequently, the valid root bridge is no longer able to serve as the root bridge and the network topology is changed, triggering spanning tree recalculation. As a result, traffic may be switched from high-speed links to low-speed links, causing network congestion. To prevent network congestion, enable root protection on the switch to protect the role of the root switch by retaining the role of the designated port.

Root protection takes effect only on designated ports.

Perform the following operations on the root bridge.