Recently I have wanted to make my trunk connections from switch to switch more secure by only allowing the necessary VLANs. I wanted to remove the Native VLAN from the Allowed List (for VLAN hopping) but came upon Meraki documentation that advises to add the Native VLAN to the allowed list. Also, I am running Rapid-PVST on my other non-Meraki switches. I did have a MS switch connected to a non-Meraki switch without the Native VLAN included on the trunk allowed list and it seemed like STP was running properly. https://documentation.meraki.com/MS/Deployment_Guides/Advanced_MS_Setup_Guide - "If a Native VLAN is specified, ensure that it is also added to the Allowed VLANs configuration" - "MS series switches can participate in spanning tree only when a spanning tree instance is running on VLAN 1 of all switches. In addition, VLAN 1 must be allowed on all trunk ports running Rapid-PVST, so that BPDUs are seen by the Meraki switches in the topology" Would I need to include the Native VLAN to a hybrid network (Meraki and Non-Meraki)? Also, would I need to include the Native VLAN into a Meraki only network?
... View more