Spanning Tree Protocol (STP) prevents Layer 2 switching loops while allowing redundant links in an Ethernet network. Without STP, loops can create broadcast storms, unstable MAC address tables, and network outages.
How STP Works
Switches exchange Bridge Protocol Data Units (BPDUs) to elect a root bridge and calculate one loop-free forwarding path. Redundant ports that could create a loop are placed into a blocking or discarding state until they are needed.
Key STP Roles
- Root bridge: the reference switch selected by the lowest bridge ID.
- Root port: each non-root switch’s best path toward the root bridge.
- Designated port: the forwarding port for a network segment.
- Alternate port: a backup path that can take over after a failure.
STP Versions
- STP (802.1D): classic protocol with slower convergence.
- RSTP (802.1w): rapid convergence and modern default for many networks.
- MSTP: maps VLANs to spanning-tree instances for more efficient scaling.
- Rapid PVST+: Cisco per-VLAN rapid spanning tree implementation.
Best Practices
- Choose the root bridge deliberately using bridge priority.
- Use PortFast only on edge ports connected to end devices.
- Enable BPDU Guard on edge ports to protect against accidental switch connections.
- Use Root Guard where another switch must not become root.
- Document VLANs, trunks, and redundant paths before making changes.
Troubleshooting STP
Check the root bridge, port roles, port states, BPDUs, and topology-change counters. On Cisco switches, useful commands include show spanning-tree and show spanning-tree vlan <vlan-id>.
Continue Learning
Read our VLAN Configuration guide and Network Hardware Components guide. For Cisco study resources, visit the Cisco Premium PDF collection.