Enabling Root Guard - Cisco Catalyst 2975 Software Configuration Manual

Configuring Optional Spanning-Tree Features
Beginning in privileged EXEC mode, follow these steps to enable EtherChannel guard. This procedure
is optional.
Command
Step 1 configure terminal
Step 2
spanning-tree etherchannel guard
misconfig
Step 3
end
Step 4 show spanning-tree summary
Step 5 copy running-config startup-config
To disable the EtherChannel guard feature, use the no spanning-tree etherchannel guard misconfig
global configuration command.
You can use the show interfaces status err-disabled privileged EXEC command to show which switch
ports are disabled because of an EtherChannel misconfiguration. On the remote device, you can enter
the show etherchannel summary privileged EXEC command to verify the EtherChannel configuration.
After the configuration is corrected, enter the shutdown and no shutdown interface configuration
commands on the port-channel interfaces that were misconfigured.

Enabling Root Guard

Root guard enabled on an interface applies to all the VLANs to which the interface belongs. Do not
enable the root guard on interfaces to be used by the UplinkFast feature. With UplinkFast, the backup
interfaces (in the blocked state) replace the root port in the case of a failure. However, if root guard is
also enabled, all the backup interfaces used by the UplinkFast feature are placed in the root-inconsistent
state (blocked) and are prevented from reaching the forwarding state.
You cannot enable both root guard and loop guard at the same time.
Note
You can enable this feature if your switch is running PVST+, rapid PVST+, or MSTP.
Beginning in privileged EXEC mode, follow these steps to enable root guard on an interface. This
procedure is optional.
Command
Step 1
configure terminal
Step 2 interface interface-id
Step 3 spanning-tree guard root
Step 4 end
Step 5
show running-config
Step 6 copy running-config startup-config (Optional) Save your entries in the configuration file.
To disable root guard, use the no spanning-tree guard interface configuration command.
Catalyst 2975 Switch Software Configuration Guide
18-18
Purpose
Enter global configuration mode.
Enable EtherChannel guard.
Return to privileged EXEC mode.
Verify your entries.
(Optional) Save your entries in the configuration file.
Purpose
Enter global configuration mode.
Specify an interface to configure, and enter interface configuration mode.
Enable root guard on the interface.
By default, root guard is disabled on all interfaces.
Return to privileged EXEC mode.
Verify your entries.
Chapter 18 Configuring Optional Spanning-Tree Features
OL-19720-02