What is RSTP?

Understanding RSTP

RSTP (Rapid Spanning Tree Protocol) is an IEEE 802.1w network protocol that prevents loops in switched Ethernet networks while converging far faster than the original Spanning Tree Protocol (802.1D). It computes a loop-free topology by blocking redundant paths, but reduces failover time from STP's roughly 30 to 50 seconds down to a few seconds or less.

RSTP achieves rapid convergence by redefining port roles and states and using an active handshake. It collapses STP's five states into three (Discarding, Learning, Forwarding) and adds port roles, including Alternate (a backup to the root port) and Backup (a backup to a designated port), that are precomputed and ready to take over immediately. Instead of relying solely on timers, RSTP switches exchange a proposal/agreement handshake on point-to-point links to quickly transition ports to Forwarding, and edge ports (the equivalent of PortFast) move to Forwarding instantly. RSTP is backward compatible with legacy STP switches.

RSTP matters for availability and security because slow spanning-tree convergence creates outage windows and, during reconvergence, can briefly cause loops or traffic black-holing. Faster, deterministic recovery limits disruption. As with STP, RSTP must be protected: an attacker injecting crafted BPDUs could try to become the root bridge and reroute traffic for interception, so BPDU Guard, Root Guard, and disabling spanning tree on untrusted edge ports remain essential hardening measures.

For example, a campus network with redundant uplinks between distribution switches runs RSTP. When the primary uplink fails, the switch's precomputed Alternate port transitions to Forwarding almost immediately via the proposal/agreement handshake, restoring connectivity in well under a second rather than the tens of seconds plain STP would require, keeping voice and video sessions from dropping.