Is there a difference in BPDU Guard and Root Guard?. I read that with BPDU Guad the port is disabled if it receives a Hello BPDU.... and with Root Guard it can receive Hello BPDU but disables the port if it receives a better BPDU. Can someone let me know those are two different things? Tnks.
The 2 features are essentally doing 2 different things.
1) BPDU Guard is enabled on a port or globally in which case it applies to all ports enabled as portfast. The idea behing BPDU Guard is that a BPDU should never been seen on this port as there should not be another switch connected to this port.
2) Root Guard is enabled on a port basis and is designed to make sure that the switch you have designated as the root bridge stays as the root bridge. So a port enabled with Root Guard would expect to receive BPDU's on it as there will be a switch on the other end but it does not expect to see a superior BPDU ie. it does not expect to see A BPDU that would lead to a new root bridge being selected.
Another question comes to me... so, is Root Guard configured only in ports of the Root Switch to ensure the actual Root Switch remains been the root? or it can be configure on Non-Switch ports to avoid a Switch with a better BPDU than the actual Root Switch to cause a change by becoming the Root Switch?
Hi everyone, I would like to thank you in advance for any help you can provide a newcomer like myself!
Im studying the 100-105 book by Odom and am currently on the topic of Port security. I purchased a used 2960 and I'm trying to follow a...
While deploying a number of 18xx/2802/3802 model access points (APs), which run AP-COS as their operating platform. It can be observed on some occasions that while many of their access points were able to join the fabric WLC withou...