We are having two 6509E core switches along with 22 3560g edge switches. The edge switches have dual uplinks, one to each core. We have enabled rapid spanning tree on all switches. I am somewhat confused about on which edge switch ports "loop guard" and "root guard" "bpduguard" should be enabled. We dont want a situation where someone connects another switch and that becomes the root.The core switch vlans are on HSRP with even vlans active on core2 and odd vlans active on core1.
Would someone please explain about the best solutions/practices that they have come across?
Thanks in advance.