I am trying to configure the switches on a network to use STP or RSTP but I'm confused about how to do this. The network consists of 3 switches, all on the default subnet, so a fairly simple setup. However, all three switches are connected directly to a Meraki firewall. My concerns are as follows:

It seems like in this setup there would be no STP root, unless the meraki can act as root.

It seems like this network has no redundancy. Does this mean I should forgo the use of STP entirely? Should I add redundancy?

And finally would it be considered better practice to connect only one switch to the firewall and connect the other two switches to that one, making it the root?

  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you could provide and accept your own answer.
    – Ron Maupin
    Apr 1, 2018 at 21:48

1 Answer 1


Spanning tree is to prevent layer-2 forwarding loops. It only works if you have multiple bridges (switches are bridges) connected. It works by forwarding frames toward the root bridge, thus preventing loops.

If you connect each switch (bridge) to a separate layer-3 interface on your firewall/router, then you have no need for STP, but if you connect your switches together, then you need to use STP, and it will select a root bridge.

The optimal location of the root bridge depends on how the traffic should flow. If the traffic is primarily leaving your network through the firewall/router, then you want the bridge connected to the firewall/router to be the root bridge. If your traffic is primarily from host to host in the LAN, then you want the root bridge to be central to the LAN.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.