I’d like to make a ring of a few CRS3xx devices connected by their 10Gb SFP+ ports (over DAC cables , copper SFP+ like S+RJ10, or fiber - depending on distance) which carry multiple VLANs as trunk ports and STP to protect from failure of any single switch (or link between switches). At the same time, I don’t want STP to appear on any other ports (never send any BPDU, drop any BPDU received as some ports may be connected to untrusted networks). I also need port isolation for a few ports (10Gb ring used as uplink ports). Is such setup currently possible with HW offloading? I see STP can be enabled globally on the whole bridge, not per port. The closest thing I found in the manual is edge=yes but it seems not to work properly (I lose access to the device through that port - Safe Mode recovers it). Also, is MSTP necessary or is RSTP sufficient (just need to break the loop somewhere, in the same way for all VLANs)?