Enable and configure Spanning Tree Protocol on Layer 2 switch interfaces to detect
and eliminate Layer 2 loops on firewalls.
| Where Can I Use This? | What Do I Need? |
- NGFW (Managed by PAN-OS or Panorama)
|
- PAN-OS 12.2.2 or a later release
- PA-500 Series: PA-550, PA-560
- No additional license required
|
Spanning Tree Protocol (STP) detects and eliminates Layer 2 loops. Configure STP on
every Layer 2 switch interface, and on any Layer 2 interfaces in the same broadcast
domain, to prevent loops. PAN-OS supports IEEE 802.1s Multiple Spanning Tree (MSTP).
STP is disabled by default.
Configuration has three stages: create the global profile to enable STP system-wide,
create port profiles to define per-port behavior, then apply a port profile to each
interface.