
he BKN* state is an extension to the [Spanning Tree Protocol (STP)](/spanning-tree-protocol-stp). It appears when using the `show spanning-tree vlan` command and indicates various types of inconsistencies on network ports. Inconsistencies prompting the BKN* state include:

- **[Root Inconsistent](/stp-root-inconsistency-state)**: Triggered by a violation of the STP [Root Guard](/stp-root-guard).
- **Loopguard Inconsistent**: Occurs when the [Loopguard](/stp-loop-guard) is breached.
- **PVID inconsistent** primarily related to a [native VLAN](/native-vlan) mismatch
* **Type inconsistent** which appears when there is a mismatch of the STP protocol being used, or the [mode](/switchport-modes) being used on connected ports.

Referencing the Cisco command guide for spanning-tree commands can provide further insights into the BKN* status and its implications within network infrastructure.

## Links

https://networklessons.com/spanning-tree/spanning-tree-port-states/

STP Broken (BKN) State and Port Inconsistencies

STP - BPDUs on a switch where STP is disabled

STP - BPDUs, VLAN IDs, and PVST+

STP - Cost of last link added by receiving switch

STP - Disabling spanning-tree

STP - Factors to Consider When Choosing a Root Bridge

STP - Learning State

STP - MST CIST Root

STP - MST CST and CIST

STP - MST Virtual Bridge and its role in interfacing with other STP topologies

STP - MST and PVST+ selecting root port

STP - MST maps groups of VLANs

STP - MST region attributes

STP - MST viewed as a single switch by PVST+

STP - Max Age vs Message Age

STP - Multiple Spanning Tree (MST)

STP - Multiple types of STP on the same switch

STP - PVST+ and Rapid PVST+ interaction

STP - Per VLAN Spanning Tree plus (PVST+)

STP - RSTP BPDU Flags and their usage

STP - RSTP EdgePort

STP - RSTP Proposal Timer Operation

STP - RSTP convergence process

STP - RSTP port roles

STP - RSTP prerequisites for immediate move to forward state

STP - RSTP proposal-agreement process

STP - RSTP while timer cannot be observed

STP - RSTP while timer

STP - Root Inconsistency State

STP - Root Link Query (RLQ) BPDU

STP - Shortest Path Bridging (SPB)

STP - Time to select root bridge

STP - Topology Change Acknowledgement (TCA)

STP - UDLD and Fiber Links

STP - Understanding MST regional root identifier and proposal-agreement process

STP - UplinkFast and reconvergence

STP - UplinkFast and root port delay timer

STP - UplinkFast

STP - bridge priority

STP - connecting one port to another port on the same switch

STP - determining the blocked port using port ID

STP - port identification

STP - port roles

STP - port states

STP - spanning-tree root primary command

STP - what bridge ID does the MST region use

STP - what is a topology change

STP BPDU Guard

STP BPDU Types

STP BPDU destination MAC address

STP Cost Calculation Methods

STP Loop Guard

STP Max Age

STP Message Age

STP PortFast Best Practice

STP Portfast Options

STP Root Bridge selection

STP Root Guard

STP Topology Change (TC) flag

STP Topology Change Timer

STP UDLD and Autonegotiation

STP UDLD

STP bridge priority values

STP changing link cost

STP configuring on EtherChannel

STP contents of a BPDU

STP cost long mode

STP cost short mode

STP determining blocked port using cost

STP direct vs indirect link failure

STP fine tuning the spanning tree protocol

STP how a switch identifies a BPDU

STP how to find the root bridge

STP interface type

STP prio nbr value

STP topology change process

Security - 802.1x with WLC and AAA server

Security - AAA for RESTCONF

Security - Best Practices for Repurposing Network Devices

Security - Cisco AnyConnect Secure Mobility Client

Security - Cisco Secure Client

Security - Cisco VPN Client

Security - Cisco VPN client software

Security - Diffie-Hellman groups

Security - Extensible Authentication Protocol over LAN (EAPOL)

Security - GETVPN

Security - IEEE 802.1X

Security - IOS Usernames and Passwords

Security - IPsec nonce

Security - Kerberos

Security - MAC Authentication Bypass

Security - Network Access Control (NAC)

Security - Next Generation Firewall

Security - Secure Unique Device Identifier (SUDI)

Security - WPA 4-way handshake

Security - WebVPN

Security - accessing VTY from another VRF

Security - assigning privilege levels, syntax and behavior

Security - bogons

Security - broadcast-multicast storm