Primary and backup core switches are configured to ensure network redundancy, with the backup automatically taking over if the primary fails.

Understanding Primary and Backup Roles

A primary core switch is the main switch responsible for forwarding traffic and acting as the root bridge in Spanning Tree Protocol (STP) for all VLANs. The backup switch is configured to take over automatically if the primary fails, ensuring minimal network disruption . In modern Cisco networks, technologies like Virtual Switching System (VSS) allow two physical switches to operate as a single logical switch, simplifying redundancy .

Spanning Tree Configuration

To configure primary and backup switches for STP:

1. Set the primary root bridge for each VLAN:

   spanning-tree vlan <VLAN_ID> root primary This automatically lowers the switch priority to make it the root bridge .

2. Set the secondary root bridge for failover:

   spanning-tree vlan <VLAN_ID> root secondary This sets a slightly higher priority than the primary, so it becomes root only if the primary fails .

3. Verify configuration:

   show spanning-tree This command confirms which switch is currently the root bridge for each VLAN.

Link Aggregation and Redundancy

For core switches connected with multiple links:

• Use EtherChannel to bundle multiple physical links into a single logical link, maximizing bandwidth and providing redundancy .
• Protocols:
  • PAgP (Cisco proprietary)
  • LACP (open standard)
• Without EtherChannel, STP will block redundant links, wasting bandwidth.

Stack-Based Redundancy

For switches that support stacking:

• Designate slot 1 as primary and slot 2 as backup during initial setup or using the easy setup configuration .
• Additional switches can be configured as primary-capable to take over if both primary and backup fail.
• Consider switch capabilities and speed when assigning roles, as the most capable switch should be primary.

Verification and Best Practices

• Always verify the root bridge and backup using show spanning-tree.
• Ensure all VLANs are accounted for when configuring primary and secondary root bridges.
• For non-stacked switches, ensure proper LAG configuration and STP cost adjustments to control traffic flow in case of link failure .
• Regularly test failover scenarios to confirm backup switch takes over seamlessly. By combining STP root bridge configuration, EtherChannel for link redundancy, and stack or VSS-based primary/backup assignment, you can achieve a resilient core network that maintains connectivity even during switch or link failures.