stp default configuration

  • 1
  • Question
  • Updated 7 months ago
I'm working on a plan to move from traditional bridges to VLAN aware bridges in my environment and the documentation on the page regarding STP is confusing me a bit.

https://docs.cumulusnetworks.com/display/DOCS/Spanning+Tree+and+Rapid+Spanning+Tree

The top of this document indicates that spanning tree is disabled by default for bridges, and then a note just below that indicates spanning tree is enabled by default in Cumulus 3.2.1.

In my configuration we either have an L2 domain for servers local to the Leaf device only, or possibly will be bridging a VTEP (using LNV). It is my understanding both of these scenarios shouldn't require STP.

Is it possible to disable stp (if it is indeed enabled by default now), or do I need to start configuring all interfaces now with the "mstpctl-bpduguard yes" and "mstpctl-portbpdufilter yes" that are facing my server and VTEP ports to get "PortFast" like functionality?
Photo of Jeff Weber

Jeff Weber

  • 110 Points 100 badge 2x thumb

Posted 7 months ago

  • 1
Photo of Sean Cavanaugh

Sean Cavanaugh, Alum

  • 3,380 Points 3k badge 2x thumb
The top of this document indicates that spanning tree is disabled by default for bridges, and then a note just below that indicates spanning tree is enabled by default in Cumulus 3.2.1.
Not disabled per say, just not enabled by default.  We started enabling STP by default (on purpose) because its best practice.

Is it possible to disable stp (if it is indeed enabled by default now)
Yes, you would add bridge-stp off to the interface stanza or use NCLU.
net add bridge stp off

 However I highly recommend against this.

or do I need to start configuring all interfaces now with the "mstpctl-bpduguard yes" and "mstpctl-portbpdufilter yes" that are facing my server and VTEP ports to get "PortFast" like functionality?
The command you seek is:
mstpctl-portadminedge yes
The only time you should use mstpctl-portbpdufilter is on the VXLAN interface.  If we filter bpdus something always bad happens :)
Photo of Jeff Weber

Jeff Weber

  • 110 Points 100 badge 2x thumb
Awesome. If I'm reading the linked document correctly it sounds like I can add the options

mstpctl-portadminedge swpN=no
mstpctl-bpduguard swpN=no

to my bridge interface where the ports listed with no are exceptions to the default and the other members of the bridge will get those options as a yes. Is this the case or do they need to be in both locations to work?

Is there a manual page or document which shows the correct configuration grammar for these options in their various locations in /etc/network/interfaces?
Photo of Eric Pulvino

Eric Pulvino, Official Rep

  • 3,930 Points 3k badge 2x thumb
Yes. Try `if query -s` for an on box dynamic overview of acceptable keywords.