How to protect a network (that's already running spt) from a customer's layer2 loop?