| In cases where VLANs do not span multiple switches it is a best practice to not implement STP. Avoiding the use of STP will provide the most deterministic and highly available network topology. If STP is required, then review the switch configuration to verify that RSTP or MSTP has been implemented. Following are example configurations: |
spanning-tree mode rapid-pvst
spanning-tree mode mst
spanning-tree mst configuration
instance 1 vlan 10, 11, 12
instance 2 vlan 13, 14
If RSTP or MSTP has not been implemented where STP is required, this is a finding.
Note: Note: Cisco has implemented RSTP as part of MSTP and Rapid-PVST+.