Loop Guard adds STP/RSTP protection against Layer 2 loops. If a discarding port stops receiving BPDUs, it enters the loop-inconsistent state instead of moving to forwarding. section 15.4 section 15.4.2
Figure 15.9 A loop is caused when SW3 stops receiving BPDUs from SW2. (1) A software malfunction on SW2 prevents it from sending BPDUs. (2) After the max age timer counts down, SW3’s port becomes a designated port and transitions to the forwarding state. (3) All three links between the switches are active, resulting in a Layer 2 loop.
A software failure can stop BPDU transmission; after the max-age timer expires, the port may otherwise become designated and forward, activating all links and creating a Layer 2 loop. section 15.4.2
Configure and interpret Loop Guard as follows:
- Enable it under the interface with spanning-tree guard loop. section 15.4.2
- Recognize a blocked port as BKN and LOOP_Inc in spanning-tree output. section 15.4.2
- Expect automatic recovery when BPDUs resume; do not combine Loop Guard with Root Guard on one port. section 15.4.2
