09-05-2023 08:26 PM
Here is the only way if you are using Active-Passive Mode. To totally disable STP with these two commands together. Around 5 seconds in switchover process if no STP process on switch.
spanning bpdufilter enable
spanning portfast trunk
For VirtualWire and Layer2 Mode, you may have problem when using Passive link state auto and Network pre-negotiation enabled because PA program is crazy. During a SUSPEND/REBOOT/SHUTDOWN, it will activate the passive node for around 0.5 second before deactivating the crrent activate node. That means, it will LOOP. If you have multicast applications in your network, you are done. You have to use your owned way to avoid that 0.5 second loop. So, Passive link state auto is meaningless on PA firewall.
For Virtual Wire, you may try Active-Active mode and enable everything, then, use rapid-pvst or MST on Cisco switches. They means you loop the network always (besides PA crazy program 0.5 second loop) and using RSTP to break the loop. So, the downtime dring switch over is in second level. For L2 Mode, no way (Active-Active not allow).
