SLPP Config in Fabric Connect Network

[Andres02]

Hello,

I'm trying to configure SLPP in a Fabric to the Edge network but I'm a little bit confused after looking to some articles and best practices.

We have a topology that includes 2 VPS 7400 in a vIST. This vIST is connected to two firewalls/routers through an LACP.  All access switches are located in different IDFs and these IDF are connected to the vIST, all trough NNIs. We want to know how SLPP should be configured, if it should be configured just in all edge switches with SLLP guard? Or if it should be completed by configuring in the Core (vIST) for all VLANs that extend to the access ports?

In edge switches we have Laptops, cameras, APs, printers and voIP phones connected to the network.

I'm attaching the topology.

Thanks.

[WillyHe]

Hello Andreas02,

This is how you do it.

• Configure SLPP on the SMLT cluster and enable on all "access" port NNI's, on both cluster members witch a different threshold.
  Both cluster members generate SLPP packets in selected VLAN's and recognize their own and each others SLPP packets and react as configured.
• Configure SLPP-GUARD on the ACCESS switches, only on ACCESS ports, never on NNI uplink ports.
  When an SLPP packet is received on an access port, they will react as configured.
  SLPP-GUARD recognizes SLPP packets from ALL sender, also from "other" SMLT cluster(s).

Hope it helps

WillyHe

[elsie78ash]

For your Fabric to the Edge network, you should configure SLPP on all access-layer switches to protect against loops created by end-user devices. You should not configure SLPP on the vIST (core) switches, as this could block legitimate inter-switch links and disrupt network traffic. The vIST should only be configured with standard MLAG and LACP for its uplinks to the firewalls.