Spanning Tree portfast/bpduguard vs. Spanning Tree PVST

Greetings. I'm relatively new to switching, so here goes.

We have 6 switches (Cisco 2060G).   Two of them have the first 10 dedicated ports designated as VLAN2 for iSCSI purposes. Our iSCSI SAN is directly connected to some of them, while our iSCSI host is connected to others.

The remaining 4 switches have "spanning tree mode pvst" in the running/startup configuration, with the correct ports Trunked.

From what I'm learning, it's best to *not* use spanning tree on non-internetworked ports (i.e. PCs, printers, etc.), but to set them as:
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable

Is that correct ? If so, do I need to designate the VLAN for each of those ports too, even though it's the default VLAN ?

Thanks.
-Stephen
lapavoniAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

NetExpert Network Solutions Pte LtdTechnical SpecialistCommented:
//From what I'm learning, it's best to *not* use spanning tree on non-internetworked ports (i.e. PCs, printers, etc.), but to set them as:
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable//

Yes - This is the standard configuration for access port in which server/pc/laptop can connect.

These ports can be in vlan 1 or these ports can be in assigned to any vlan and that doesn;t matter.

General practice config on access port

conf t
switchport mode acccess
switchport access vlan <vlan id)  ==> This can be any of your choice based on the network design
spanning-tree portfast
spanning-tree bpduguard enable

General practice for trunk port ( can be connected to uplink switch or downstream to vSwitch/SAN Switch)

conf t
switchport mode trunk
Switchport trunk encapsulation dot1q
switchport trunk allowed vlan <id> ( u can add as many per request)



//If so, do I need to designate the VLAN for each of those ports too, even though it's the default VLAN ?//  -- Its depends upon your network design. If your network has flat vlan i.e) vlan 1, then you no need to assign these ports to vlan 1, but if you have few more Layer 3 vlan, then you can set this port based on your requirement

Thanks
Don JohnstonInstructorCommented:
From what I'm learning, it's best to *not* use spanning tree on non-internetworked ports (i.e. PCs, printers, etc.),
I wouldn't put it like that.  It's not that you "shouldn't" do it. It's just an optimized configuration. And you're actually not "turning off" spanning-tree with those commands. You're just decreasing how long a port takes to start moving traffic when the host connected to that port is powered up  (which for things like servers is  pretty much moot).

That said, there's nothing wrong with enabling portfast and bpduguard. In fact, it's considered a best practice for ports connected to end stations.

If so, do I need to designate the VLAN for each of those ports too, even though it's the default VLAN ?
Which VLAN that is assigned to a port is not related to spanning tree. You assign a VLAN to a port because you want the device connected to that port to be in a certain VLAN.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
lapavoniAuthor Commented:
Excellent information from both experts. Thank you both very much.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Network Architecture

From novice to tech pro — start learning today.