Yes, production, so need to plan this properly. Already made too many angry users so far 🙂    I'm curious.. so on my trunk port between the Nexus and Meraki.. since I dont have VLAN 1 allowed.. why do things seem to be behaving poorly at times? I would assume that since VLAN 1 isnt allowed over the Trunk, that Nexus has its STP config, and Meraki has its STP config. Not the case? and I suppose I could look at some packet captures to see what is really going on?    For example. I have a 2960-X (switch 2) that is connected to another 2960-X (Switch 1) via port channel, who then has a port channel to the Nexus stack. That far switch (switch 2) is occasionally going offline and comes back shortly after. My assumption is STP but theres no logs or anything indicating that.  ... View more

@Brash wrote:   For clarification, are your C9300's running in Meraki managed or Meraki monitored mode? If Meraki monitored, they'll be running RPVST out of the box and thus are fine to be the STP root bridge. If Meraki managed mode, they'll act more like an MS and therefore, the Nexus should be the STP root bridge. I actually have no idea. They were ordered as C9300-M, if I recall, if it matters. I'm happy to look if the setting exists somewhere, I haven't come across that one.  ... View more

Okay. You're confident that Cisco RPVST and Meraki RSTP can talk as long as VLAN 1 is available? I only ask because something I read said to change from RPVST to MST. It was probably one of the many footnotes in Meraki docs that I cant find right now lol.    Looks like I actually don't have VLAN 1 going 2960-X: 2960X-Upstairs#sh run int vlan 1 Building configuration... Current configuration : 48 bytes ! interface Vlan1 no ip address shutdown end One of my Nexus's: NX9K-1# sh run int vlan 1 all !Command: show running-config interface Vlan1 all !Running configuration last done at: Fri Feb 21 15:05:14 2025 !Time: Mon Feb 24 19:49:15 2025 version 7.0(3)I7(10) Bios:version 07.66 interface Vlan1 no description shutdown mtu 1500 bandwidth 1000000 autostate delay 1 medium broadcast snmp trap link-status carrier-delay msec 100 load-interval counter 1 60 load-interval counter 2 300 load-interval counter 3 60 mac-address 00fe.c8e6.b12f no management   and looks like I need to allow it over the trunk to the Meraki interface Ethernet1/10 description Uplink to Meraki 9300 switchport mode trunk switchport trunk allowed vlan 20,50,172,1000,1010,1020 mtu 9216  and just for completion sakes: NX9K-1# sh span sum Switch is in rapid-pvst mode Root bridge for: VLAN0001, VLAN0010, VLAN0020, VLAN0050, VLAN0099-VLAN0101 VLAN0172, VLAN1000, VLAN1010, VLAN1020, VLAN1030 L2 Gateway STP is disabled Port Type Default is disable Edge Port [PortFast] BPDU Guard Default is disabled Edge Port [PortFast] BPDU Filter Default is disabled Bridge Assurance is enabled Loopguard Default is disabled Pathcost method used is short vPC peer-switch is enabled (operational) STP-Lite is disabled Name Blocking Listening Learning Forwarding STP Active ---------------------- -------- --------- -------- ---------- ---------- VLAN0001 0 0 0 3 3 VLAN0010 0 0 0 3 3 VLAN0020 0 0 0 4 4 VLAN0050 0 0 0 4 4 VLAN0099 0 0 0 3 3 VLAN0100 0 0 0 3 3 VLAN0101 0 0 0 3 3 VLAN0172 0 0 0 5 5 VLAN1000 0 0 0 4 4 VLAN1010 0 0 0 4 4 VLAN1020 0 0 0 4 4 VLAN1030 0 0 0 3 3 ---------------------- -------- --------- -------- ---------- ---------- 12 vlans 0 0 0 43 43 ... View more

hi Brash, thanks for the response.    I'll double check about VLAN 1, so even if VLAN 1 isnt used/configured on the Nexus/Catalyst side, it needs to exist/be enabled?    If I'm reading your link properly, it is saying specifically the MS shouldn't be root bridge, right? I have no intention of an MS being root.. but the 9300's ideally should be.. if thats OK.  ... View more