[c-nsp] backup with STP

Reuben Farrelly reuben-cisco-nsp at reub.net
Wed Sep 28 09:23:35 EDT 2005



On 29/09/2005 1:06 a.m., Andris Zarins wrote:
> Second - completely agree with Aivars - don't run any kind of STP with
> devices NOT under your control. Interoperability is only one of problems

Interoperability problems are best solved by insisting they all use cisco kit ;-)

> you might face, perhaps even not the most painful one. Imagine that
> under some conditions, customer starts telling your network, that his
> device is the root bridge, and if your network believes it, I guess that
> might mean somewhat like 'dead end'... 

That is exactly why you should specifically configure a root bridge in the 
core somewhere on a device that is both central in the topology and reliable, 
and put the command "spanning-tree guard root" command on the edge interfaces 
so that the customer can never become the root of the STP.  It makes sense for 
them, and for you as a provider.

reuben


More information about the cisco-nsp mailing list