Network+ lab 7 of 27
Spanning tree: choosing the root and protecting edge ports
Three switches in a triangle give redundancy and a loop. You find out why the wrong switch became root, move to Rapid PVST+, place the root per VLAN so both uplinks carry traffic, protect edge ports with PortFast and BPDU guard, and watch a port go err-disabled.
Run this lab
It needs Lite: its 5 nodes are set to 5 vCPU and 4,352 MB in total. That fits the free demo too.
In your workspace: Shared, then CompTIA Network Plus N10-009 guided labs, then 07 - Spanning tree - choosing the root and protecting edge ports
- Level
- Intermediate
- Time
- About 55 minutes
- Nodes need
- 5 vCPU, 4,352 MB
- Smallest plan
- Lite
The scenario
Harbour Logistics added a third switch, SW3, and cabled it to both core switches for redundancy. Since then users report slow transfers, and the network team noticed that traffic between the core switches takes a detour through SW3. Your job: find out why, put the spanning tree where the design says it belongs, and protect the user ports.
| Link | SW end | SW end | Carries |
|---|---|---|---|
| Core link | SW1 Gi0/0 | SW2 Gi0/0 | trunk 10, 20 |
| Uplink A | SW1 Gi0/1 | SW3 Gi0/0 | trunk 10, 20 |
| Uplink B | SW2 Gi0/1 | SW3 Gi0/1 | trunk 10, 20 |
| PC1 | SW2 Gi0/2 | - | VLAN 10 (10.10.10.11) |
| PC2 | SW3 Gi0/2 | - | VLAN 10 (10.10.10.12) |
Design: SW1 is the root for VLAN 10 (priority 4096) and the backup for VLAN 20 (8192). SW2 is the root for VLAN 20 (4096) and the backup for VLAN 10 (8192). SW3 keeps the default priority.
What you’ll practise
- Explain how STP prevents loops and how the root bridge is elected
- Read root, designated and alternate port roles and port states
- Set bridge priorities per VLAN to choose the root and load-balance
- Switch to Rapid PVST+ and test failover
- Configure PortFast and BPDU guard, and recover an err-disabled port
The tasks
- Find the root bridge and the blocked port
- Move to Rapid PVST+
- Put the root where the design says
- Test failover
- Protect the edge ports, and see BPDU guard trip
The Lab Tasks pane has the scenario, these tasks, the checks to run, hints and the full solution.
Topology and devices
The network as it opens in EVE-NG, drawn from the lab’s own canvas, and the image each node runs.
Every link, as text
- SW1
Gi0/0to SW2Gi0/0 - SW1
Gi0/1to SW3Gi0/0 - SW2
Gi0/1to SW3Gi0/1 - SW2
Gi0/2to PC1eth0 - SW3
Gi0/2to PC2eth0
| Node | Device | Image in Add Node | Set to |
|---|---|---|---|
| SW1 | Cisco IOSvL2 | viosl2-adventerprisek9-m.ssa.high_iron_20200929 | 1 vCPU, 768 MB |
| SW2 | Cisco IOSvL2 | viosl2-adventerprisek9-m.ssa.high_iron_20200929 | 1 vCPU, 768 MB |
| SW3 | Cisco IOSvL2 | viosl2-adventerprisek9-m.ssa.high_iron_20200929 | 1 vCPU, 768 MB |
| PC1 | VPCS host | Built in to EVE-NG | Counted as 1 vCPU, 1,024 MB |
| PC2 | VPCS host | Built in to EVE-NG | Counted as 1 vCPU, 1,024 MB |
How to open this lab
Sign in to your workspace at
lab.cloudlabbox.com.In File Manager, open Shared, then the folder
CompTIA Network Plus N10-009 guided labs.Open
07 - Spanning tree - choosing the root and protecting edge portsand start its nodes, then open Lab Tasks for the scenario and the steps.
The lab is read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change it, rebuild it in your own folder.
More Network+ labs
Related labs in other courses
CloudLabBox is independent of CompTIA, Cisco and Netgate. The lab follows exam topics and isn’t vendor training material; vendor names identify the exams and the images in the workspace.