Yup and this would include all of the ports facing your end users as well. I tend to configure either BPDU Guard or Root Guard on all access ports as well
Thank you, Steve Di Bias Network Engineer - Information Systems Valley Health System - Las Vegas Office - 702- 369-7594 Cell - 702-241-1801 [email protected] -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Jawed Lashari Sent: Monday, November 14, 2011 7:10 AM To: Syed Asif Raza; [email protected]; [email protected] Subject: Re: [OSL | CCIE_RS] Rootguard placement It should be enabled on interface which should never become root port. So you would place on downstream interfaces. -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Syed Asif Raza Sent: Monday, November 14, 2011 3:40 AM To: [email protected]; [email protected] Subject: Re: [OSL | CCIE_RS] Rootguard placement Hi Amit, If you will only place root guard on your root switch, then this means that you are only protecting root switch from receiving superior BPDUs. But what about the other switches which are part of your L-2 topology? They will accept the superior BPDU from the rogue switch and which in turn will destroy your L-2 topology. So, to make it simple, you need to place root guard on all the ports of all the switches where you do not expect a root bridge. Regards, Syed Asif RazaCCIE (R&S) 29012 > Date: Mon, 14 Nov 2011 14:49:52 +0530 > From: [email protected] > To: [email protected] > Subject: [OSL | CCIE_RS] Rootguard placement > > Hi, > > > I need to knwo where exactly should the root guard should be configured. I > feel it should always be on Root Switch . > > And if not kindly explain with a diagram . > I have this Link( > http://www.cisco.com/en/US/tech/tk389/tk621/technologies_tech_note09186a 00800ae96b.shtml) > but i am still confused abt it. What should go wrong if i have this > commmand on Root Swtich. > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com > > Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com _______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com _______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com UHS Confidentiality Notice: This e-mail message, including any attachments, is for the sole use of the intended recipient (s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution of this information is prohibited. If this was sent to you in error, please notify the sender by reply e-mail and destroy all copies of the original message. _______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
