Restricted Role

In a large metro environment, to prevent external bridges from influencing the spanning tree active topology, the following commands have been introduced for Rapid Spanning Tree Protocol (RSTP) and MSTP (Multiple Spanning Tree Protocol).

  • configure stpd stpd_name ports restricted-role enable port_list
    • This command enables restricted role on a specified port in the core network to prevent external bridges from influencing the spanning tree active topology.

    • Restricted role should not be enabled with edge mode.

    • stpd_name—Specifies an STPD (Spanning Tree Domain) name on the switch.

    • port_list—Specifies one or more ports or slots and ports.

    • Enabling restricted role causes a port to not be selected as a root port, even if it has the best spanning tree priority vector. Such a port is selected as an alternate port after the root port is selected. The restricted role is disabled by default. If set, it can cause a lack of spanning tree connectivity.

    • A network administrator enables restricted role to prevent external bridges from influencing the spanning tree active topology.

  • configure stpd stpd_name ports restricted-role disable port_list
    • This command disables restricted role on a specified port in the core network.

    • stpd_name—Specifies an STPD name on the switch.

    • port_list—Specifies one or more ports or slots and ports.

    • Restricted role is disabled by default. If set, it can cause a lack of spanning tree connectivity. A network administrator enables restricted role to prevent external bridges from influencing the spanning tree active topology.