PracticeBlogFlashcardsEspañol

STP/RSTP Loop Prevention and Bridge Roles

Key Takeaways

  • STP prevents Layer 2 loops by blocking redundant paths while keeping backup paths available.
  • RSTP provides faster convergence than original STP while keeping the same basic loop-prevention purpose.
  • The root bridge is the logical center of the spanning tree and should be intentionally selected in production networks.
  • Port roles and states explain why one redundant link forwards while another blocks or discards.
  • Loop symptoms include broadcast storms, MAC table instability, high CPU, and widespread switching outages.
Last updated: April 2026

Layer 2 Ethernet has no TTL field like IP. If a physical switching loop exists, broadcasts and unknown unicast frames can circulate and multiply. Spanning Tree Protocol prevents that by creating a loop-free logical topology.

Why STP Exists

ProblemResult without STP
Redundant switch linksFrames can loop indefinitely
Broadcast framesBroadcast storm can consume bandwidth and CPU
MAC learning on multiple portsMAC address table flapping
Unknown unicast floodingExcessive traffic across the switching domain

STP lets you build redundant physical paths while blocking selected logical paths. If the active path fails, a blocked path can transition and restore connectivity.

STP and RSTP

FeatureSTPRSTP
Standard family802.1D802.1w
Main purposePrevent loopsPrevent loops with faster convergence
ConvergenceSlowerFaster
Exam focusRoot bridge, blocked ports, loop preventionFaster recovery and similar roles

RSTP is generally the better modern answer when a scenario asks for faster Layer 2 convergence and the environment supports it.

Bridge ID and Root Bridge

Switches elect a root bridge. The bridge ID includes priority and MAC address. The lowest bridge ID wins.

FactorSelection impact
Bridge priorityLower priority is preferred
MAC addressTie-breaker when priorities match
Root bridge placementShould be a central, stable switch
Unplanned rootCan cause inefficient paths

In PBQs, if the root bridge is an access switch in a closet, the likely fix is to set a lower priority on the intended core or distribution switch.

Port Roles and States

Role or stateMeaning
Root portBest path from a non-root switch toward the root bridge
Designated portForwarding port for a network segment
Alternate portBackup path that can replace a root port
Blocking/discardingDoes not forward user traffic to prevent loops
ForwardingSends and receives normal traffic
Edge portPort connected to an endpoint, not another switch

Different vendor outputs use slightly different labels, especially between STP and RSTP. The exam usually tests the concept: a redundant path may be intentionally non-forwarding.

Loop Symptoms

SymptomWhy it points to a loop
Network-wide slowness after adding a switchBroadcast storm or loop introduced
MAC address appears on multiple switch ports repeatedlyMAC table flapping
Switch CPU spikesControl plane overwhelmed by Layer 2 churn
All VLANs on a switch become unstableTrunk loop or redundant path issue
Link lights blink constantly with little useful trafficFlooding or storm condition

PBQ Guidance

If the PBQ shows redundant links:

  1. Identify the intended root bridge.
  2. Confirm all switches run compatible STP/RSTP settings.
  3. Expect one redundant path to block or discard.
  4. Use edge-port features only on endpoint ports.
  5. Do not disable STP to make a blocked link forward.

Common Traps

TrapBetter reasoning
Assume a blocking port is brokenIt may be preventing a loop
Disable STP because a redundant link is unusedThat can create a broadcast storm
Let access switches become root bridgeRoot should usually be planned near the network core
Enable edge-port behavior on switch-to-switch linksEdge settings belong on endpoint-facing ports
Troubleshoot Layer 3 first during a broadcast stormStabilize Layer 2 before routing tests are meaningful
Test Your Knowledge

What is the main purpose of STP?

A
B
C
D
Test Your Knowledge

Which switch becomes the STP root bridge?

A
B
C
D
Test Your KnowledgeMulti-Select

Which symptoms commonly suggest a Layer 2 loop? Select two.

Select all that apply

MAC address table flapping
Broadcast storm
A single expired web certificate
Wrong NTP timezone