As I stated in my first post, we are going to connect to a remote site using mpls and our ISP have changed their port to a dot1q trunk port and they have allocated vlan 535 to us.

So I assume we have to tag all packets intended for the remote vlan 535?

STP does indeed cause us to tread with caution. How do the rest of you do these types of connections?

Tyrone

Understood, so VLAN 535 will be the provider's.

To move forward, create VLAN 535 and a transit VLAN. The transit VLAN will hold your L3 information in the dot1q trunk.

On the L2 interface (which is currently the L3 interface), configure trunking and only allow VLAN 535 and the transit VLAN on that trunk which in turn prunes all remaining VLANs.

Make sure to implement different VTP domains and secure the domains with a password between locations.

With STP, make sure the edge devices are STP root of all their VLANs, except the provider's VLAN and you need to select with edge device will be the STP root for the transit VLAN.

You need to have the same VLAN on both edge devices (/30 subnet) and they will communicate the same as they are communicating now. The only difference, you are moving your L3 information from the physical port to the SVI.

Thank you ver much this was very helpfull