Root Bridge Election – Detailed Explanation

1. What is a Root Bridge?

Definition and Role in STP Topology: The Root Bridge (or Root Switch) is the central reference point for all Spanning Tree Protocol (STP) calculations in a Layer 2 network.
Role:
- Serves as the logical “root” of the spanning tree.
- All other switches calculate the shortest, loop-free path to the root bridge.
- Prevents Layer 2 loops while maintaining connectivity.

2. Importance in Preventing Loops

The root bridge anchors the STP tree structure. Without a unique root, multiple redundant paths could form loops—causing broadcast storms and MAC table instability.

3. Bridge ID (BID) Structure

Component	Description
Bridge Priority	2 bytes (default: 32768)
MAC Address	6 bytes (unique per switch)
Bridge ID	Priority + MAC (8 bytes total)

Example BID: 32768.0011.2233.4455

4. How Root Bridge is Elected

Election Rules: The switch with the lowest Bridge ID (BID) wins. Priority is compared first; if equal, the lowest MAC address is the tiebreaker.

Example:

Switch A: Priority 32768, MAC 00:11:22:11:11:11
Switch B: Priority 32768, MAC 00:11:22:22:22:22
Result: Switch A becomes root (same priority, lower MAC).

5. Bridge Priority Configuration

Default priority: 32768 (on most switches).
Set a lower priority value on the intended root to influence the election:

Switch(config)# spanning-tree vlan 10 priority 4096

Tip: Lower value = higher chance to be root. Use increments of 4096 (valid: 0, 4096, ..., 61440).

6. MAC Address Role in Election

MAC address is only used as a tiebreaker when priorities are equal.
MACs are unique and burned-in; the switch with the lowest MAC will win if priorities are not changed.

7. Impact of Root Bridge Placement

Design Tip: Place the root bridge at the network core or where critical devices connect. This ensures the shortest paths cross high-speed links, optimizing performance.
Example: Set the core switch as root so server/inter-VLAN traffic stays on core/distribution links.

8. Election Process During Network Changes

Triggers for re-election:

New switch with lower BID is added.
Current root bridge fails or disconnects.
Priority values are changed.

Impact: Temporary disruption as STP reconverges.

9. Root Bridge in PVST and PVST+

PVST/PVST+ run separate root bridge elections per VLAN. Each VLAN can have a different root bridge.
Example: VLAN 10 root = Switch A, VLAN 20 root = Switch B (enables load balancing).

10. Verifying Root Bridge Status

Key commands:

show spanning-tree
show spanning-tree vlan [id]

On the root switch: This bridge is the root appears in the output.
Check Priority, MAC address, and Root ID fields.

Root ID    Priority    4096
           Address     0011.2233.4455
This bridge is the root

11. Troubleshooting Root Bridge Issues

Symptom	Possible Cause	Solution
Wrong switch is root	Default priority not changed	Explicitly set root's priority lower
Suboptimal path	Root not in core/distribution	Reassign root location
Root flaps (changes often)	Unstable links, rogue devices	Use Root Guard, check cabling

To force election: Lower the priority on your chosen root bridge.

12. RSTP and Root Bridge Election

Election process is identical in RSTP (Rapid Spanning Tree Protocol) as classic STP: lowest BID wins.
RSTP only changes convergence speed, not election logic.

13. Security Considerations

Rogue Root Bridge Attacks: An attacker could add a switch with a lower BID and become root, disrupting traffic paths.
Mitigation:
- Enable Root Guard on ports where the root bridge should never appear:
```
spanning-tree guard root
```
- Enable BPDU Guard on access ports to shut them down if BPDUs are received.

Example Scenario

Switch A (Core): Priority 4096, MAC 0011.1111.1111
Switch B (Edge): Priority 32768, MAC 0022.2222.2222
All others: Default priority.
Result: Switch A is root due to lowest priority.
Verify with:
```
show spanning-tree vlan 1
```

Key Points and Exam Tips

Root bridge election = lowest BID (priority + MAC).
Always configure priority on your chosen root.
PVST+ runs root election per VLAN (enables load balancing).
Root Guard protects root placement.
Changing root bridge can optimize performance.
MAC address is only a tiebreaker; set priority explicitly for control.
Use show spanning-tree for verification and troubleshooting.

When and Where to Use Root Bridge Placement

Any network using STP/PVST/PVST+ for loop prevention.
Optimizing paths for critical apps/servers.
Building or redesigning campus/core LANs for stability and performance.

Root Bridge Election Quiz

1. What is the Root Bridge in STP topology?

A. The switch with the most ports B. The switch with the highest MAC address C. The central reference point for all spanning tree calculations D. The switch physically closest to the router

Correct answer is C. The Root Bridge is the logical center of STP and all spanning tree calculations are based on it.

2. What components make up the Bridge ID (BID)?

A. Bridge Priority and MAC address B. Switch name and IP address C. VLAN ID and MAC address D. Switch model and firmware version

Correct answer is A. The BID is composed of a 2-byte priority and a 6-byte MAC address.

3. How is the Root Bridge elected?

A. By the switch with the highest IP address B. By the switch with the highest priority C. By manual configuration only D. By the switch with the lowest Bridge ID (priority + MAC)

Correct answer is D. The Root Bridge is the switch with the lowest Bridge ID, which prioritizes lower priority first, then lowest MAC address as a tiebreaker.

4. What is the default Bridge Priority value on most switches?

A. 4096 B. 32768 C. 8192 D. 0

Correct answer is B. The default bridge priority on Cisco switches is 32768.

5. How can you influence which switch becomes Root Bridge?

A. By setting a lower bridge priority on that switch B. By changing its MAC address C. By unplugging all other switches D. By increasing its IP address

Correct answer is A. Lowering the bridge priority increases the chances of that switch being elected Root Bridge.

6. What is the role of the MAC address in Root Bridge election?

A. It is the primary factor in election B. It is ignored C. It is used as a tiebreaker when priorities are equal D. It determines the STP version used

Correct answer is C. MAC address serves as a tiebreaker if bridge priorities are equal.

7. What happens when a switch with a lower Bridge ID joins the network?

A. No changes in the spanning tree B. The switch with the highest Bridge ID becomes root C. Spanning Tree is disabled D. A re-election occurs and the new switch becomes Root Bridge

Correct answer is D. A new Root Bridge election happens when a switch with a lower BID joins or the current Root Bridge fails.

8. Which command verifies the root bridge for a VLAN?

A. show vlan B. show spanning-tree vlan [id] C. show interfaces trunk D. show mac address-table

Correct answer is B. The show spanning-tree vlan [id] command shows root bridge information for a specific VLAN.

9. What tool protects against rogue root bridge attacks?

A. Root Guard B. DHCP Snooping C. Port Security D. BPDU Filter

Correct answer is A. Root Guard prevents unauthorized switches from becoming the root bridge.

10. Why is it best practice to place the Root Bridge in the core or distribution layer?

A. To increase VLAN count B. To reduce the number of switches C. To optimize traffic flow and reduce bottlenecks D. To disable STP on edge switches

Correct answer is C. Placing the root bridge centrally optimizes Layer 2 traffic flow and reduces bottlenecks.

← Back to Home