I'm going to replace some old "central" access switches to some Cisco Catalyst 2960X, and I'm not sure what to do on their STP configurations.
For this network, we have some "central" access switches, that connect some hosts and some unknown unmanaged or "smart" switches. For now, I have to maintain these unknown switches working, but I want to avoid getting my entire network down in case of a loop.
How should I configure these access ports regarding STP? At first, I thought it was better to turn off the STP using
portfast in all ports (except my trunk), but i'm afraid that some of these connected switches might cause a loop in the entire network. If I turn on BPDU filter, as far as I know, any connected switch will put the port in
err-disable, and I don't want that either.
Is there a way that I can have these unmanaged switches connected on the access ports and just disable their ports to the Cisco in case of a problem?