Root Guard

Root Guard prevents a port from becoming a root port, protecting STP root placement.

Updated: 2026-03-06

Definition

Root Guard is used to enforce where the STP root bridge should be.

If a superior BPDU is received, the port is placed into a root-inconsistent state to prevent topology changes.

Key points

Protects root bridge placement
Blocks superior BPDUs on protected ports
Used on ports where root should never appear

Common mistakes

Not using Root Guard on access/distribution boundaries.
Confusing Root Guard with BPDU Guard.

Related exams

Cisco CCNA 200-301

Free CCNA 200-301 mini test with focused next steps. Continue in the app for offline packs and detailed explanations.

Related terms

Want to practice this in exam-style questions?

Use the mini tests on each exam page, then continue in the app for offline packs and detailed explanations.