What is Spanning-tree root-guard?
When a port is enabled as root-guard, it cannot be selected as the root port even if it receives superior STP BPDUs. The port is assigned an “alternate” port role and enters a blocking state if it receives superior STP BPDUs. See the chapter titled “Multiple Instance Spanning Tree Operation” in the Advanced Traffic Management Guide for your switch.