liveBook · Manning

Root guard

As explained in Acing the CCNA Exam: Volume 1 Fundamentals and Protocols

Root Guard is a spanning-tree protection feature that prevents a port from accepting a superior BPDU and thereby prevents an external switch from becoming the root bridge.

Root Guard stabilizes spanning-tree topology by preventing an external switch from becoming the root bridge. A protected port that receives a superior BPDU enters the root-inconsistent state and stops forwarding. section 15.4.1

Service-provider protection

A service provider applies Root Guard toward a customer network. If the customer switch advertises a lower bridge ID, the protected port blocks it. Configure the interface with spanning-tree guard root; show spanning-tree reports BKN and ROOT_Inc. section 15.4.1

How Acing the CCNA Exam: Volume 1 Fundamentals and Protocols covers it

How deep it goes
Explains purpose, port-state behavior, automatic recovery, and interface configuration with representative output.
Examples
Uses a service-provider/customer topology, SW4 and SW5, superior BPDUs, and spanning-tree show output.
What you can do after
Configure it on an interface with spanning-tree guard root and recognize root-inconsistent blocking in show output.
How it connects
Connects Root Guard to STP, RSTP, BPDUs, bridge IDs, and root-bridge selection.

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Acing the CCNA Exam: Volume 1 Fundamentals and Protocols. The section links point to the parts of the book it draws on.