Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.
Training Camp • Cybersecurity Glossary
Spanning Tree's Hello (2s), Forward Delay (15s), and Max Age (20s) timers that control convergence and prevent switching loops.
STP Timers Definition: Spanning Tree's Hello (2s), Forward Delay (15s), and Max Age (20s) timers that control convergence and prevent switching loops.
STP timers are the configurable time values the Spanning Tree Protocol (802.1D) uses to manage topology changes and prevent Layer 2 switching loops. They govern how quickly the network detects changes and transitions ports between states, balancing fast convergence against the risk of forming a loop during reconfiguration.
Classic STP defines three primary timers. Hello Time (default 2 seconds) sets how often the root bridge sends BPDUs. Forward Delay (default 15 seconds) controls the time a port spends in each of the Listening and Blocking-to-Learning transitional states, ensuring stability before forwarding. Max Age (default 20 seconds) is how long a switch retains BPDU information before considering the path lost and recalculating. With defaults, a failed link can take up to roughly 30 to 50 seconds to converge. To preserve consistency, only the root bridge's timers propagate domain-wide, and they should be tuned only on the root.
STP timers matter because they trade availability against loop safety. A broadcast storm from even a brief Layer 2 loop can collapse a network in seconds, so the conservative defaults err toward caution. But long convergence means outages during failover, which is why protocols like Rapid STP (802.1w) achieve sub-second convergence. Misadjusting timers can cause loops or instability, so most networks migrate to RSTP rather than hand-tuning legacy values.
For example, in a campus running classic STP, an uplink to the root bridge fails. A non-root switch waits up to Max Age (20 seconds) for missing BPDUs, then moves an alternate port through Listening and Learning (15 seconds each) before forwarding, leaving users disconnected for nearly 50 seconds, the delay that motivated the move to RSTP.
Turn knowledge into credentials with our instructor-led cybersecurity boot camps.
View All Courses →