Hi,

If I use the following basic design, where is the best place for configuring root guard ?

Two 6500's at the core, one is the root and the other secondary. Hanging off each 6500 I have say 3 x 3550 switches.

Am I right in thinking that the best blace to configure root guard is on the access switches (3550's), since only the rouge switch will be blocked from joining the network ?

If I were to configure this on the root switch as I have been reading I would surely risk one or both of my core switches completely 'blocking' and layer 2 wise would grind to a halt until the offending switch was located and removed ?

Cheers,

Phil.