Loops? Vlans

[xdxml12]

Hi All,


I have a current design that looks like this.

Several access switches connect to many booths throughout the office. This office is used for shows and customers plug in their devices into the available slots in the booths. But the problem I am having is that loops can easily occur and vlans being exchanged with new devices, because too often ppl bring their own switches and plug into the available ports. How do i stop this from happening. Sometimes 2 or 3 different customers use the same booth so I cannot do a mac adres sticky. I also want to keep broadcasts to minimum, they are killing the network. What is your advise?

 

[VinceWhirlwind]

enable spanning tree and configure storm control:

https://supportforums.cisco.com/docs/DOC-4385

 

[xdxml12]

Thanks for the inputs. Ive decided to add bpdu gaurd and stop sending dtp to stop forming trunks. The private vlans was an interesting read. Thanks all.

 

[burtsbees]

Yes, BPDU guard on spantree portfast ports definitely!

ip access-list extended IP-Options-and-Powerball
deny ip any any winning-powerball-ticket
permit ip any any option any-options
!
class-map ACL-Options-and-Powerball
match access-group name IP-Options-and-Powerball
!
policy-map CoPP-POLICY
class ACL-Options-and-Powerball
drop
!
control-plane
service-policy input CoPP-POLICY