Protecting Spanning tree

Practice Labs Module
Time
30 minutes
Difficulty
Intermediate

The "Protecting Spanning-Tree" module provides you with the instructions and Cisco hardware to develop your hands on skills in protecting spanning-tree on Cisco switches. This module includes the following exercises: 1. Protecting Spanning-Tree.

Join over 3 million cybersecurity professionals advancing their career
Sign up with
or

Already have an account? Sign In »

Overview

Introduction

The Protecting Spanning-Tree module provides you with the instructions and Cisco hardware to develop your hands on skills in protecting spanning-tree on Cisco switches. This module includes the following exercises:

  1. Protecting Spanning-Tree

Exercise 1 – Protecting Spanning-Tree

In this exercise you will learn how to protect your spanning-tree environment from unwanted changes. This includes root, bpdu and loop guard.

Protecting from unwanted BPDUs

It is advisable to protect your environment against unwanted BPDU traffic, this is because it is relatively straightforward to attach a switch to the network and start advertising a later configuration revision and more preferable bridge priority than the current root bridge.

Root Guard

Root guard protects your network from rogue switches becoming a root bridge. Enabling root guard ensures that the switch port only forwards and relays BPDUs, it does not receive BPDUs on the interface configured with root guard.