I had an incident where one of the staff plug in his switch and brought down the whole network. This was due to spanning tree running on my network
I want to disable spanning-tree on my network and stop users plugging the switch that could may bring down the whole network.
I've made the following changes on my switch configs:
1. Change vtp mode to 'transparent'
2. Each switch has a unique 'vtp mode'
3. All switch ports for PCs have bpdufilter enable and all switchports for uplinks ( switch to switch, switch to router, etc) have bpdu guard enable.
ALso, are there any difference between 'spanning-tree guard root' and spanning-tree bpdu filter'?
What are the best practices for configuring switchports?
Is it enough to prevent network loop? What else can I do to avoid the switching loop?