Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

spanning-tree strange behavior in transparent FWSM

Hi experts,

I recently encountered a strange spanning-tree behavior, the topology is as below.

SW1 -------(vlan2)FWSM1(vlan10)----------Core SW3

   -                                                                     -

   -                                                                     -

   -                                                                     -

   -                                                                     -

SW2--------(vlan2)FWSM1(vlan10)---------- Core SW4

FWSM is on SW3 and SW4, running in transparent mode with vlan 2 being outside interface and vlan 10 being inside interface.

SW1 and SW2 servers as access switch.

FWSM permits the BPDU packet and HSRP keepalive to pass through.

The trunk between SW1&SW2 only allow vlan2, and trunk between SW3&SW4 only allow vlan10.

For vlan 2, the root is on SW1 where it configures priority 0.

For vlan 10, it's not configured on SW12 (only on SW34), and priority is the default value on SW3&SW4

Since BPDU is allowed on FWSM, we can see the root of vlan 10 is SW1 vlan 2. (the root port is the port-channel facing FWSM).Is this correct?

Also HSRP packet are allowed on FWSM, so it seems the HSRP keepalive packet will also be sent from both trunk between SW3&SWS4 and through FWSM and back.?

I do see from below link, it's suggested to enable BPDU packet to avoid loop in case both FWSM are active, but it seems a bit strange with L2 spanning-tree topology.

Any feedback will be appreciated.