MULTIPLE SPANNING-TREE LAB

CCNP ENCOR Exam

By Justin O. OLANGI
(view my LinkedIn)
I. PHYSICAL TOPOLOGY
In addition, topology plays a vital role in constructing local area netwoks (LANs). Physical topology describes
the actual or the physical layout of a network, such as the physical arrangement of wires, media (computers),
or cables in a network.

2 By Justin O. OLANGI
II. LOGICAL TOPOLOGY
The logical topology shows the appearance of a connection to the network end users. It also indicates
how data and signals are transmitted across a network.

3 By Justin O. OLANGI
II. MST CONFIGURATION
The Multiple Spanning Tree Protocol (MSTP) is an STP variant that allows multiple and independent
spanning trees to be created over the same physical network.

The parameters for each spanning tree can be configured separately, so as to cause a different network
device to be selected as the root bridge or different paths to be selected to form the loop-free topology.
Consequently, a given physical interface can be blocked for some of the spanning trees and unblocked for
others.

MST is configured using the following process:

Step 1. Define MST as the spanning tree protocol with the command spanning-tree mode mst.

Step 2. (Optional) Define the MST instance priority, using one of two methods:

■ spanning-tree mst instance-number priority priority

The priority is a value between 0 and 61,440, in increments of 4096.

■ spanning-tree mst instance-number root {primary | secondary} [diameter diameter]

The primary keyword sets the priority to 24,576, and the secondary keyword sets the priority to
28,672.

Step 3. Associate VLANs to an MST instance. By default, all VLANs are associated to the MST 0 instance.
The MST configuration submode must be entered with the command spanning-tree mst
configuration. Then the VLANs are assigned to a different MST instance with the command
instance instance-number vlan vlan-id.

Step 4. Specify the mst version number. The MST version number must match for all switches in the same
MST region. The MST version number is configured with the submode configuration command
revision version.

Step 5. (Optional) Define the MST region name. MST regions are recognized by switches that share a
common name. By default, a region name is an empty string. The MST region name is set with the
command name mst-region-name.

4 By Justin O. OLANGI
II.1 VLAN Configuration

a. SW5
SW5(config)# vlan 10
SW5(config-vlan)# name Management
SW5(config-vlan)# exit

SW5(config)# vlan 20
SW5(config-vlan)# name Employees
SW5(config-vlan)# exit

SW5(config)# vlan 444

SW5(config-vlan)# name MyRemote
SW5(config-vlan)# exit

SW5(config)# interface g0/0

SW5(config-if)# switchport trunk encapsulation dot1q
SW5(config-if)# switchport mode trunk
SW5(config-if)# switchport trunk allowed vlan 10,20,444
SW5(config-if)# switchport trunk native vlan 444

SW5(config)# interface g0/1

SW5(config-if)# switchport trunk encapsulation dot1q
SW5(config-if)# switchport mode trunk
SW5(config-if)# switchport trunk allowed vlan 10,20,444
SW5(config-if)# switchport trunk native vlan 444

SW5(config)# interface g0/2

SW5(config-if)# switchport trunk encapsulation dot1q
SW5(config-if)# switchport mode trunk
SW5(config-if)# switchport trunk allowed vlan 10,20,444
SW5(config-if)# switchport trunk native vlan 444

SW5(config)# interface g0/3

SW5(config-if)# switchport trunk encapsulation dot1q
SW5(config-if)# switchport mode trunk
SW5(config-if)# switchport trunk allowed vlan 10,20,444
SW5(config-if)# switchport trunk native vlan 444

b. SW4
SW4(config)# vlan 10
SW4(config-vlan)# name Management
SW4(config-vlan)# exit

SW4(config)# vlan 20
SW4(config-vlan)# name Employees
SW4(config-vlan)# exit

SW5(config)# vlan 444

SW5(config-vlan)# name MyRemote
SW5(config-vlan)# exit

5 By Justin O. OLANGI
 SW4(config)# interface g0/0
SW4(config-if)# switchport trunk encapsulation dot1q
SW4(config-if)# switchport mode trunk
SW4(config-if)# switchport trunk allowed vlan 10,20,444
SW4(config-if)# switchport trunk native vlan 444

SW4(config)# interface g0/3

SW4(config-if)# switchport trunk encapsulation dot1q
SW4(config-if)# switchport mode trunk
SW4(config-if)# switchport trunk allowed vlan 10,20,444
SW4(config-if)# switchport trunk native vlan 444

SW4(config)# interface g1/0

SW4(config-if)# switchport trunk encapsulation dot1q
SW4(config-if)# switchport mode trunk
SW4(config-if)# switchport trunk allowed vlan 10,20,444
SW4(config-if)# switchport trunk native vlan 444

SW4(config)# interface g0/2

SW4(config-if)# switchport trunk encapsulation dot1q
SW4(config-if)# switchport mode trunk
SW4(config-if)# switchport trunk allowed vlan 10,20,444
SW4(config-if)# switchport trunk native vlan 444

c. SW3
SW3(config)# vlan 10
SW3(config-vlan)# name Management
SW3(config-vlan)# exit

SW3(config)# vlan 20
SW3(config-vlan)# name Employees
SW3(config-vlan)# exit

SW5(config)# vlan 444

SW5(config-vlan)# name MyRemote
SW5(config-vlan)# exit

SW3(config)# interface g1/0

SW3(config-if)# switchport trunk encapsulation dot1q
SW3(config-if)# switchport mode trunk
SW3(config-if)# switchport trunk allowed vlan 10,20,444
SW3(config-if)# switchport trunk native vlan 444

SW3(config)# interface g0/3

SW3(config-if)# switchport trunk encapsulation dot1q
SW3(config-if)# switchport mode trunk
SW3(config-if)# switchport trunk allowed vlan 10,20,444
SW3(config-if)# switchport trunk native vlan 444

SW3(config)# interface g0/1

SW3(config-if)# switchport mode access
SW3(config-if)# switchport access vlan 10

6 By Justin O. OLANGI
 SW3(config)# interface g0/0
SW3(config-if)# switchport mode access
SW3(config-if)# switchport access vlan 20

c. SW2
SW2(config)# vlan 10
SW2(config-vlan)# name Management
SW2(config-vlan)# exit

SW2(config)# vlan 20
SW2(config-vlan)# name Employees
SW2(config-vlan)# exit

SW5(config)# vlan 444

SW5(config-vlan)# name MyRemote
SW5(config-vlan)# exit

SW2(config)# interface g0/2

SW2(config-if)# switchport trunk encapsulation dot1q
SW2(config-if)# switchport mode trunk
SW2(config-if)# switchport trunk allowed vlan 10,20,444
SW2(config-if)# switchport trunk native vlan 444

SW2(config)# interface g0/3

SW2(config-if)# switchport trunk encapsulation dot1q
SW2(config-if)# switchport mode trunk
SW2(config-if)# switchport trunk allowed vlan 10,20,444
SW2(config-if)# switchport trunk native vlan 444

SW2(config)# interface g0/1

SW2(config-if)# switchport mode access
SW2(config-if)# switchport access vlan 10

SW2(config)# interface g0/0

SW2(config-if)# switchport mode access
SW2(config-if)# switchport access vlan 20

c. SW1
SW1(config)# vlan 10
SW1(config-vlan)# name Management
SW1(config-vlan)# exit

SW1(config)# vlan 20
SW1(config-vlan)# name Employees
SW1(config-vlan)# exit

SW5(config)# vlan 444

SW5(config-vlan)# name MyRemote
SW5(config-vlan)# exit

SW1(config)# interface g0/1

7 By Justin O. OLANGI
 SW1(config-if)# switchport trunk encapsulation dot1q
SW1(config-if)# switchport mode trunk
SW1(config-if)# switchport trunk allowed vlan 10,20,444
SW1(config-if)# switchport trunk native vlan 444

SW1(config)# interface g0/2

SW1(config-if)# switchport trunk encapsulation dot1q
SW1(config-if)# switchport mode trunk
SW1(config-if)# switchport trunk allowed vlan 10,20,444
SW1(config-if)# switchport trunk native vlan 444

SW1(config)# interface g0/3

SW1(config-if)# switchport mode access
SW1(config-if)# switchport access vlan 10

SW1(config)# interface g0/0

SW1(config-if)# switchport mode access
SW1(config-if)# switchport access vlan 20

II.2 MST Config

a. SW5
SW5(config)# spanning-tree mode mst
SW5(config)# spanning-tree mst 0 root primary
SW5(config)# spanning-tree mst 1 root primary
SW5(config)# spanning-tree mst 2 root secondary

SW5(config)# spanning-tree mst configuration

SW5(config-mst)# name CCNP_ENCOR
SW5(config-mst)# revision 1
SW5(config-mst)# instance 1 vlan 20
SW5(config-mst)# instance 2 vlan 10

b. SW4
SW4(config)# spanning-tree mode mst
SW4(config)# spanning-tree mst 1 root secondary
SW4(config)# spanning-tree mst 2 root primary

SW4(config)# spanning-tree mst configuration

SW4(config-mst)# name CCNP_ENCOR
SW4(config-mst)# revision 1
SW3(config-mst)# instance 1 vlan 20
SW4(config-mst)# instance 2 vlan 10

c. SW3
SW3(config)# spanning-tree mode mst
SW3(config)# spanning-tree mst configuration
SW3(config-mst)# name CCNP_ENCOR
SW3(config-mst)# revision 1

8 By Justin O. OLANGI
 SW3(config-mst)# instance 1 vlan 20
SW4(config-mst)# instance 2 vlan 10

d. SW2
SW2(config)# spanning-tree mode mst
SW2(config)# spanning-tree mst configuration
SW2(config-mst)# name CCNP_ENCOR
SW2(config-mst)# revision 1
SW2(config-mst)# instance 1 vlan 20
SW2(config-mst)# instance 2 vlan 10

e. SW1
SW1(config)# spanning-tree mode mst
SW1(config)# spanning-tree mst configuration
SW1(config-mst)# name CCNP_ENCOR
SW1(config-mst)# revision 1
SW1(config-mst)# instance 1 vlan 20
SW1(config-mst)# instance 2 vlan 10

To verify MST :

SW1# show spanning-tree mst configuration

SW1# show spanning-tree mst [INSTANCE]
SW1# show spanning-tree mst interface [Interface_ID]

Change Cost methode:

SW1(config)#spanning-tree pathcost method {short | long}

II.3 MST Protection

a. Root Guard

- SW5
SW5(config)# interface range g0/1-3
SW5(config)# spanning-tree guard root
SW5(config-mst)# exit

- SW4
SW4(config)# interface range g0/2-3, g1/0
SW4(config)# spanning-tree guard root
SW4(config-mst)# exit

9 By Justin O. OLANGI
b. Loop Guard

- SW1
SW1(config)# spanning-tree loopguard default

- SW2
SW2(config)# spanning-tree loopguard default

- SW3
SW3(config)# spanning-tree loopguard default

c. PortFast and BPDU Guard

- SW1
SW1(config)# spanning-tree portfast default
SW1(config)# spanning-tree portfast bpduguard default

- SW2
SW2(config)# spanning-tree portfast default
SW2(config)# spanning-tree portfast bpduguard default

- SW3
SW3(config)# spanning-tree portfast default
SW2(config)# spanning-tree portfast bpduguard default

10 By Justin O. OLANGI
 SW5#show spanning-tree

#### MST0
Spanning tree enabled protocol mstp
Root ID Priority 32768
Address 5002.1e00.0200
Cost 0
Port 1 (GigabitEthernet0/0)
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 32768 (priority 32768 sys-id-ext 0)

Address 50c5.7700.0100
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Interface Role Sts Cost Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Gi0/0 Root FWD 20000 128.1 P2p
Gi0/1 Desg FWD 20000 128.2 P2p
Gi0/2 Desg FWD 20000 128.3 P2p
Gi0/3 Desg FWD 20000 128.4 P2p
Gi1/0 Desg FWD 20000 128.5 P2p
Gi1/1 Desg FWD 20000 128.6 P2p
Gi1/2 Desg FWD 20000 128.7 P2p
Gi1/3 Desg FWD 20000 128.8 P2p

#### MST1
Spanning tree enabled protocol mstp
Root ID Priority 24577
Address 50c5.7700.0100
This bridge is the root
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 24577 (priority 24576 sys-id-ext 1)
Address 50c5.7700.0100
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Interface Role Sts Cost Prio.Nbr Type

------------------- ---- --- --------- -------- --------------------------------
Gi0/0 Desg FWD 20000 128.1 P2p
Gi0/1 Desg FWD 20000 128.2 P2p
Gi0/2 Desg FWD 20000 128.3 P2p
Gi0/3 Desg FWD 20000 128.4 P2p

11 By Justin O. OLANGI
 #### MST2

Spanning tree enabled protocol mstp

Root ID Priority 24578
Address 5002.1e00.0200
Cost 20000
Port 1 (GigabitEthernet0/0)
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 28674 (priority 28672 sys-id-ext 2)

Address 50c5.7700.0100
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Interface Role Sts Cost Prio.Nbr Type

------------------- ---- --- --------- -------- --------------------------------

Gi0/0 Root FWD 20000 128.1 P2p

Gi0/1 Desg FWD 20000 128.2 P2p
Gi0/2 Desg FWD 20000 128.3 P2p
Gi0/3 Desg FWD 20000 128.4 P2p

12 By Justin O. OLANGI