Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.

Global Accelerated Learning • Est. 1999
Glossary Term MST

Training Camp • Cybersecurity Glossary

What is MST?

MST (Multiple Spanning Tree, IEEE 802.1s) maps many VLANs onto a few spanning-tree instances, enabling load balancing across links while staying loop-free.

Glossary > Network Security > MST

MST — MST (Multiple Spanning Tree

Understanding MST

MST (Multiple Spanning Tree Protocol), standardized as IEEE 802.1s and later folded into 802.1Q, is a spanning-tree variant that maps many VLANs onto a small number of spanning-tree instances. This keeps a switched Ethernet network loop-free while letting different VLAN groups use different active paths, providing redundancy and load balancing without running one spanning tree per VLAN.

MST works by grouping switches into MST regions. Switches in the same region share an identical configuration name, revision number, and VLAN-to-instance mapping. Within a region, each instance (MSTI) runs its own spanning tree and can choose a different root bridge and forwarding topology, so VLANs assigned to instance 1 might forward over one uplink while VLANs in instance 2 forward over another. Between regions and toward legacy switches, MST presents itself through a Common Spanning Tree using the IST (instance 0), ensuring interoperability. MST builds on the rapid convergence behavior of RSTP (802.1w).

For scalability and stability, MST solves the resource problem of Cisco's per-VLAN PVST+, which consumes CPU and memory by maintaining a separate instance for every VLAN. In a network with hundreds of VLANs, MST might use just two or three instances, dramatically reducing BPDU overhead while still allowing traffic engineering. As with all spanning-tree protocols, it prevents the broadcast storms and MAC instability that loops cause, and it should be hardened with BPDU Guard and Root Guard to resist rogue switches injecting superior BPDUs to hijack the root role.

For example, a campus network carries 200 VLANs across two redundant uplinks. The engineer configures one MST region and maps odd-numbered VLANs to instance 1 (root on the left core) and even-numbered VLANs to instance 2 (root on the right core). Now both uplinks actively forward traffic, balancing load, while either instance can fail over to the surviving path if a link drops. The whole design uses only two instances instead of 200, conserving switch resources. MST is a standard topic on Cisco switching certifications.

Learn More About MST:

Ready to Get Certified?

Turn knowledge into credentials with our instructor-led cybersecurity boot camps.

View All Courses →