Brocade Converged Enhanced Ethernet Administrator's Guide v6.1.2_cee (53-1001258-01, June 2009)

Converged Enhanced Ethernet Administrator’s Guide 57
53-1001258-01
STP, RSTP, and MSTP configuration procedures
4
To enable the CEE interface as an edge port, perform the following steps:
Enabling the guard root
From the CEE interface, use this command to enable the guard root on the switch. The guard root
feature provides a way to enforce the root bridge placement in the network. With the guard root
enabled on an interface, the switch is able to restrict which interface is allowed to be the
spanning-tree root port or the path-to-the root for the switch. The root port provides the best path
from the switch to the root switch.
Guard root protects the root bridge from malicious attacks and unintentional misconfigurations
where a bridge device that is not intended to be the root bridge becomes the root bridge. This
causes severe bottlenecks in the data path. Guard root ensures that the port on which it is enabled
is a designated port. If the guard root enabled port receives a superior BPDU, it goes to a
discarding state.
Step Task Command
1. Enter global configuration mode. switch>#config t
Enter configuration commands, one
per line. End with CNTL/Z.
switch(config)#
2. Specify the CEE interface (interface 0/1 is used in
this example).
switch(config)#interface
tengigabitethernet 0/1
switch(conf-if-te-0/1)#
3. Enable the CEE interface. switch(conf-if-te-0/1)#no shutdown
switch(conf-if-te-0/1)#
4. Enable the CEE interface as an edge port. By
default, the edge port is disabled. Syntax is as
follows:
• bpdu-filter—Sets the edge port BPDU filter for
the port.
• bpdu-guard—Guards the port against the
reception of BPDUs.
switch(conf-if-te-0/1)#spanning-tree
edgeport [bpdu-filter | bpdu-guard]
5. Display the spanning-tree configuration. switch(conf-stp)#do show
spanning-tree