show spanning-tree vlan 200 detail
Bridge Identifier has priority 20480, sysid 200, address a8b1.d36f.c670
Configured hello time 2, max age 20, forward delay 15
Current root has priority 8392, address 0021.e809.0670
Root port is 568 (Port-channel11), cost of root path is 3
Topology change flag not set, detected flag not set
Number of topology changes 27 last change occurred 1w2d ago
from StackPort1
As you can see, the source of the TCN is the StackPort1 on the switch!!!
But what is the meaning of this StackPort1 and how to determinate the real source of the topology change ?
In fact as my SSH session is open on the master and the TCN come from another switch of the stack, the source for my session is the stack port of the master switch. In order to determine which interface is really the source I have to open a session on each switch in order to find the TCN source.
For example, I have opened a session on the 2nd switch of the stack:
C3750#session 2
C3750-2# show spanning-tree detail | i from|exec|occur
VLAN0001 is executing the ieee compatible Spanning Tree protocol
Number of topology changes 26 last change occurred 1w2d ago
from GigabitEthernet2/0/52
VLAN0040 is executing the ieee compatible Spanning Tree protocol
Number of topology changes 26 last change occurred 1w2d ago
from GigabitEthernet2/0/52
As you can see above, we have found the real source of the TCN.