jskfan
asked on
Is BPDUGUARD enough to avoid ROOTGUARD ?
Is BPDUGUARD enough to avoid ROOTGUARD ?
I have read in some articles where they stated that ROOTGUARD should be configured on the Core switches interfaces facing Distributed Switches and also configured on the Distributed Switches Interfaces facing Access Switches, this in order to prevent Bad Guy from connecting a new Switch configured with Lower Priority than existing switches or configured with Root Primary command then connected to Access Switches.
I thought when configuring BPDUGUARD on Access Switches will be enough, because no other Switch can be connected to Access Switches, and when connected the port will go in Shutdown (err-disabled)
Any clarification will be appreciated.
Thanks
I have read in some articles where they stated that ROOTGUARD should be configured on the Core switches interfaces facing Distributed Switches and also configured on the Distributed Switches Interfaces facing Access Switches, this in order to prevent Bad Guy from connecting a new Switch configured with Lower Priority than existing switches or configured with Root Primary command then connected to Access Switches.
I thought when configuring BPDUGUARD on Access Switches will be enough, because no other Switch can be connected to Access Switches, and when connected the port will go in Shutdown (err-disabled)
Any clarification will be appreciated.
Thanks
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Yes.
In that scenario, rootguard is to protect you from yourself. ;-)
In that scenario, rootguard is to protect you from yourself. ;-)
ASKER
Thanks Don,
In Access Switch, BPDUGUARD should be enough , no need for Root Guard . Correct ?
In Access Switch, BPDUGUARD should be enough , no need for Root Guard . Correct ?
Yes. That is correct.
ASKER
Thank you
ASKER
ROOTGUARD should be configured on the Core switches interfaces facing Distributed Switches and also configured on the Distributed Switches Interfaces facing Access Switches