Hi tesfama,
On a Layer 2 network running a spanning tree protocol, a port connected to terminals does not need to participate in spanning tree calculation. If the port participates in spanning tree calculation, the network convergence speed will be affected. In addition, status changes of the port may cause network flapping, interrupting user traffic. To address this problem, you can configure the port as an edge port. Then, the port will not participate in the spanning tree calculation. This speeds up network convergence and improves network stability.
If an edge port is used, the issues/risks are as follows:
issue:
An edge port will lose edge port attributes after receiving BPDUs. The attackers can forge BPDUs to change edge ports to non-edge ports, which will cause the spanning tree to be recalculated and network flapping.
Solution: Enable the BPDU protection function on the switch. If the edge ports receive a BPDU, the edge ports will change to the error-down state.
risk.
1. The port connected to the Layer 2 device is incorrectly configured as an edge port, causing a temporary loop.
2. If the two edge ports of the switch are connected together, for example, the two ports are connected to the same hub, a temporary loop will occur.
I hope it helps!