Another way:"traceroute mac ip "One more pinging IP from same subnet (it can't be any switch mgmt IP in network) and you get switch/port info for both IPs. This trace command needs CDP running. --Petr

Use this global configuration command:service password-encryption--Petr

I think you can use this command:crypto key generate rsa general-keys modulus and have hostname, domain and correct time configured before this.

Problem might be network diameter, in this case 27 hops. IIRC rapid-PVST+ supports only 7hops. That will explain multiple roots - they just don't see each other.

I think problem is routing in server, telnet packets comming from VLAN107, but leaving to default gateway in VLAN102, and statefull firewall blocks this packets (log entry confirms that).Solution is policy routing on server (Linux supports this with ...