Currently I have a single fiber connection connecting two organizations/networks using VLAN interface (SVI) and static routing. Switchs involved happen to be Nexus switches from both organizations. Two networks are independant and have their own Internet access.
On Switch-A from Organization A:
Switch-A# sh run int e1/1
interface Ethernet1/1
switchport
switchport access vlan 255
spanning-tree port type edge
spanning-tree bpdufilter enable
no shutdown
On Switch-B from Organization B:
Switch-B# sh run int e1/1
interface Ethernet1/1
switchport
switchport access vlan 255
spanning-tree port type edge
spanning-tree bpdufilter enable
no shutdown
Of course both networks have their own IPs for interface VLAN253. Everything is working.
Now there is a requirement to extend a couple of VLANs (1001 and 1002) from Organization B to A, meaning some machines in these two VLANs will be physically located at A but have IPs from B. Here is my plan: create VLAN1001 and VLAN1002 in A without SVI (non-routed in network A) and convert the access ports to trunk ports:
Switch-A# sh run int e1/1
interface Ethernet1/1
switchport
switchport mode trunk
switchport trunk native vlan 255
switchport trunk allowed vlan 255,1001-1002
spanning-tree bpdufilter enable
no shutdown
Switch-B# sh run int e1/1
interface Ethernet1/1
switchport
switchport mode trunk
switchport trunk native vlan 255
switchport trunk allowed vlan 255,1001-1002
spanning-tree bpdufilter enable
no shutdown
SVI for VLAN255 will be continuously used to route traffic between A and B. I want to keep Spanningtree seperated so bpdufilter is enabled.
Is this a viable solution?
