H3c-technologies H3C S12500-X Series Switches Bedienungsanleitung

H3C S12500-X Switch SeriesLayer 2—LAN SwitchingConfiguration Guide Hangzhou H3C Technologies Co., Ltd. http://www.h3c.com Softw

v Configuration procedure ····························································································································

89 Configuring Digest Snooping As defined in IEEE 802.1s, connected devices are in the same region only when their MST region-related configurations

90 Step Command Remarks 3. Enable Digest Snooping on the interface. stp config-digest-snooping By default, Digest Snooping is disabled on ports. 4.

91 [DeviceB-Ten-GigabitEthernet1/0/1] quit [DeviceB] stp global config-digest-snooping Configuring No Agreement Check In RSTP and MSTP, the following

92 device receives no agreement packet from the upstream device and sends no agreement packets to the upstream device. As a result, the designated po

93 Configuration procedure # Enable No Agreement Check on Ten-GigabitEthernet 1/0/1 of Device A. <DeviceA> system-view [DeviceA] interface ten-

94 region during network design. However, due to possible configuration errors or malicious attacks in the network, the legal root bridge might recei

95 Step Command Remarks 3. Enable the loop guard function for the ports. stp loop-protection By default, loop guard is disabled. Configuring port

96 Enabling TC-BPDU guard When a device receives topology change (TC) BPDUs (the BPDUs that notify devices of topology changes), it flushes its forw

97 Task Command Display the statistics of TC/TCN BPDUs sent and received by all ports in the specified MSTI or all MSTIs (in IRF mode). display stp [

98 Configuration procedure 1. Configure VLANs and VLAN member ports: (Details not shown.) { Create VLAN 10, VLAN 20, and VLAN 30 on both Device A a

vi Setting an encapsulation format for LLDPDUs ·································································································· 542H

99 # Enter MST region view, configure the MST region name as example, map VLAN 10, VLAN 30, and VLAN 40 to MSTI 1, MSTI 3, and MSTI 4, respectively,

100 0 Ten-GigabitEthernet1/0/3 ROOT FORWARDING NONE 1 Ten-GigabitEthernet1/0/1 DESI FORWAR

101 Figure 26 MSTIs mapped to different VLANs ABA BC DCBCMSTI 1 mapped to VLAN 10AD DRoot bridge Normal link Blocked linkMSTI 3 mapped to VLAN 30MS

102 Configuring loop detection Overview Incorrect network connections or configurations can create Layer 2 loops, which results in repeated transmiss

103 Figure 28 Inner frame header for loop detection The inner frame header for loop detection contains the following fields: • Code—Protocol sub-t

104 Port status auto recovery Port status auto recovery applies only to the block and no-learning loop protection actions. If the device receives no

105 Configuring the loop protection action You can configure the loop protection action globally or on specific ports. The global configuration appl

106 Setting the loop detection interval With loop detection enabled, the device sends loop detection frames at a specified interval. A shorter interv

107 Configuration procedure 1. Configure Device A: # Create VLAN 100, and globally enable loop detection for the VLAN. <DeviceA> system-view

108 [DeviceC-Ten-GigabitEthernet1/0/1] port trunk permit vlan 100 [DeviceC-Ten-GigabitEthernet1/0/1] quit [DeviceC] interface ten-gigabitethernet 1/0

1 Configuring Ethernet interfaces The switch series supports Ethernet interfaces, management Ethernet interfaces, and Console interfaces. For the inte

109 Configuring VLANs This chapter provides an overview of VLANs and explains how to configure them. Overview Ethernet is a family of shared-media LA

110 Figure 31 VLAN tag placement and format A VLAN tag includes the following fields: • TPID—16-bit tag protocol identifier that indicates whethe

111 Step Command Remarks 5. Configure the description of the VLAN. description text The default setting is VLAN vlan-id, which is the ID of the VLAN

112 Step Command Remarks 7. Configure the expected bandwidth of the interface. bandwidth bandwidth-value By default, the expected bandwidth (in kbp

113 Make sure a port is assigned to its PVID. Otherwise, when the port receives frames tagged with the PVID or untagged frames, the port filters out

114 Step Command Remarks 2. Enter interface view. • Enter Layer 2 Ethernet interface view: interface interface-type interface-number • Enter Lay

115 Step Command Remarks 2. Enter interface view. • Enter Layer 2 Ethernet interface view: interface interface-type interface-number • Enter Lay

116 Step Command Remarks 2. Enter interface view. • Enter Layer 2 Ethernet interface view: interface interface-type interface-number • Enter Lay

117 Port-based VLAN configuration example Network requirements As shown in Figure 32, Host A and Host C belong to Department A, and access the enter

118 { Configure Host B and Host D to be on the same IP subnet. For example, 192.168.200.0/24. Verifying the configuration # Verify that Host A and H

2 Splitting a 40-GE interface and combining split 10-GE interfaces This feature is not supported on non-default MDCs. Splitting a 40-GE interface into

119 Configuring the private VLAN The private VLAN feature uses a two-tier VLAN structure, including a primary VLAN and secondary VLANs. This feature

12 0 VLAN associated with the secondary VLAN. For more information about promiscuous mode, trunk promiscuous mode, and host mode, see Layer 2—LAN Sw

121 Step Command Remarks 9. Return to system view. quit N/A 10. Enter Layer 2 Ethernet interface view or Layer 2 aggregate interface view. inter

122 • On Device B, VLAN 5 is a primary VLAN which contains uplink port Ten-GigabitEthernet 1/0/5 and is associated with secondary VLANs VLAN 2 and

123 [DeviceB-Ten-GigabitEthernet1/0/2] quit # Associate the secondary VLANs 2 and 3 with the primary VLAN 5. [DeviceB] vlan 5 [DeviceB-vlan5] priva

124 Untagged ports: Ten-GigabitEthernet1/0/1 Ten-GigabitEthernet1/0/2 Ten-GigabitEthernet1/0/5 VLAN ID: 2 VLAN type: S

125 Figure 35 Network diagram Configuration procedure 1. Configure Device B: # Configure VLAN 5 and VLAN 10 as primary VLANs. <DeviceB> sy

126 [DeviceB] interface ten-gigabitethernet 1/0/3 [DeviceB-Ten-GigabitEthernet1/0/3] port access vlan 3 [DeviceB-Ten-GigabitEthernet1/0/3] port priv

127 Name: VLAN 0005 Tagged ports: Ten-GigabitEthernet1/0/1 Untagged ports: Ten-GigabitEthernet1/0/2 Ten-GigabitEthernet1/0/3

128 Configuring QinQ This document uses the following terms: • CVLAN—Customer network VLANs, also called "inner VLANs," refer to VLANs th

3 Step Command Remarks 2. Enter the view of any 10-GE interface split from a 40-GE interface. interface interface-type interface-number N/A 3. Com

129 Figure 36 Single-tagged Ethernet frame header and double-tagged Ethernet frame header For correct transmission of tagged frames, H3C recommends

130 Implementations of QinQ QinQ is enabled on a per-port basis. The link type of a QinQ-enabled port can be access, hybrid, or trunk. The QinQ taggi

131 Configuring QinQ Enable QinQ on customer-side ports of PEs. Enabling QinQ A QinQ-enabled port tags an incoming frame with its PVID. To enable Qi

132 Configuring the TPID for VLAN tags TPID identifies a frame as an 802.1Q tagged frame. On the device, the TPID in the 802.1Q tag added on a QinQ-e

133 Setting the 802.1p priority in SVLAN tags By default, a QinQ-enabled port copies the 802.1p priority in the CVLAN tag to the SVLAN tag. For untag

134 Step Command Remarks 12. Configure the port to trust the 802.1p priority in incoming frames. qos trust dot1p By default, the device trusts the p

135 Figure 38 Network diagram Configuration procedure This example assumes that the CVLANs have been configured correctly on the CEs. Configuring P

136 3. Configure Ten-GigabitEthernet 1/0/3 (a customer-side port): # Configure Ten-GigabitEthernet 1/0/3 as a trunk port, and assign it to VLAN 200

137 Configuring devices in the service provider network All ports on the path between PE 1 and PE 2 must allow frames from VLAN 100 and VLAN 200 to p

138 # Enable QinQ on the port. [PE1-Ten-GigabitEthernet1/0/1] qinq enable # Configure the port to transparently transmit frames from VLAN 3000. [PE1-

4 Step Command Remarks 7. Restore the default settings for the Ethernet interface. default N/A 8. Bring up the Ethernet interface. undo shutdown By

139 Configuring VLAN mapping Overview VLAN mapping re-marks VLAN tagged traffic with new VLAN IDs. H3C provides the following types of VLAN mapping:

140 Figure 40 Application scenario of one-to-one VLAN mapping In Figure 40, the network is planned as follows: • Each home gateway uses different

141 Figure 41 Application scenario of one-to-two and two-to-two VLAN mapping Site 1 and Site 2 are in VLAN 2 and VLAN 3, respectively. The VLAN ass

142 Figure 42 Basic concepts of VLAN mapping One-to-one VLAN mapping Figure 43 One-to-one VLAN mapping implementation In Figure 43, after you co

143 • For the uplink traffic, after you configure one-to-two VLAN mapping on the customer-side port, the device tags the packets from a CVLAN with a

144 Task Remarks Configuring one-to-one VLAN mapping Configure one-to-one VLAN mapping on the wiring-closet switch as shown in Figure 40. Configurin

145 Configuring one-to-two VLAN mapping Perform one-to-two VLAN mapping on the edge devices from which customer traffic enters SP networks, on PE 1 a

146 Step Command Remarks 1. Enter system view. system-view N/A 2. Enter Layer 2 Ethernet interface view or Layer 2 aggregate interface view. •

147 Figure 46 Network diagram Configuration procedure 1. Configure Switch A: # Configure customer-side port Ten-GigabitEthernet 1/0/1 as a trunk p

148 # Configure customer-side port Ten-GigabitEthernet 1/0/2 as a trunk port, and assign the port to original VLANs and translated VLANs. [SwitchA]

5 Configuring physical state change suppression on an Ethernet interface The physical link state of an Ethernet interface is either up or down. Each t

149 Figure 47 Network diagram Configuration procedure 1. Configure PE 1: # Configure one-to-two VLAN mapping on customer-side port Ten-GigabitEthe

150 3. Configure PE 3: # Configure Ten-GigabitEthernet 1/0/1 as a trunk port, and assign the port to VLANs 100 and 200. <PE3> system-view [PE

151 [PE4] display vlan mapping Interface Ten-GigabitEthernet1/0/2: Outer VLAN Inner VLAN Translated Outer VLAN Translated Inner VLAN 6

152 Configuring LLDP Overview In a heterogeneous network, a standard configuration exchange platform ensures that different types of network devices

153 1. LLDPDU encapsulated in Ethernet II Figure 49 Ethernet II-encapsulated LLDPDU Table 11 Fields in an Ethernet II-encapsulated LLDPDU Field D

154 Table 12 Fields in a SNAP-encapsulated LLDPDU Field Description Destination MAC address MAC address to which the LLDPDU is advertised. It is the

155 Type Description Remarks End of LLDPDU Marks the end of the TLV sequence in the LLDPDU. Port Description Specifies the port description of the

156 Type Description Power Via MDI Contains the power supply capability of the port, including the PoE type (PSE or PD), PoE mode, whether PSE power

157 NOTE: If the MAC/PHY configuration/status TLV is not advertisable, none of the LLDP-MED TLVs will be advertised even if they are advertisable.

158 • IEEE 802.1AB-2009, Station and Media Access Control Connectivity Discovery • ANSI/TIA-1057, Link Layer Discovery Protocol for Media Endpoint

6 Performing a loopback test on an Ethernet interface If an Ethernet interface does not work correctly, you can perform a loopback test on it to ident

159 Step Command Remarks 4. (Optional.) Enable LLDP. lldp enable By default, LLDP is enabled on a port. Configuring the LLDP bridge mode The foll

160 Step Command Remarks 3. Set the LLDP operating mode. • In Layer 2 or Layer 3 Ethernet interface view: lldp [ agent { nearest-customer | neare

161 Step Command Remarks 3. Enable LLDP polling and set the polling interval. • In Layer 2 or Layer 3 Ethernet interface view: lldp [ agent { nea

162 Step Command Remarks 4. Configure the advertisable TLVs (in Layer 3 Ethernet interface view). • lldp tlv-enable { basic-tlv { all | port-desc

163 Step Command Remarks 1. Enter system view. system-view N/A 2. Enter Layer 2 or Layer 3 Ethernet interface view or Layer 2 aggregate interface

164 Step Command Remarks 2. Set the TTL multiplier. lldp hold-multiplier value The default setting is 4. 3. Set the LLDPDU transmit interval. lld

165 With CDP compatibility enabled on the switch, the switch can use LLDP to receive and recognize the CDP packets received from the directly-connec

166 Bridging Exchange Protocol (DCBX) to negotiate and remotely configure the bridge capability of network elements. DCBX has three self-adaptable

167 Enabling LLDP and DCBX TLV advertising To enable the device to advertise APP, ETS, and PFC data through an interface, enable LLDP globally and e

168 Step Command Remarks 4. Return to system view. quit N/A 5. Create a class, specify the operator of the class as OR, and enter class view. tra

7 As shown in Figure 1, when both Port A and Port B forward packets at the rate of 1000 Mbps, Port C will be congested. To avoid packet loss, enable f

169 Configuring ETS parameters ETS provides committed bandwidth. The device uses ETS parameters to negotiate with the server adapter, controls the s

170 Step Command Remarks 4. Return to system view. quit N/A 5. Enter Ethernet interface view. interface interface-type interface-number N/A 6. C

171 Step Command Remarks 3. Enable the Ethernet interface to automatically negotiate with its peer to decide whether to enable PFC. priority-flow-c

172 Step Command Remarks 6. (Optional.) Set the LLDP trap transmit interval. lldp timer notification-interval interval The default setting is 30 s

173 Figure 53 Network diagram Configuration procedure 1. Configure Switch A: # Enable LLDP globally. <SwitchA> system-view [SwitchA] lldp g

174 Transmit credit max : 5 Hold multiplier : 4 Reinit delay : 2s Trap interval : 30s F

175 MED trap flag : No Polling interval : 0s Number of LLDP neighbors : 0 Number of MED neighbors : 0 Nu

176 Number of CDP neighbors : 0 Number of sent optional TLV : 0 Number of received unknown TLV : 5 LLDP agent nearest-nontpmr: Port statu

177 Number of MED neighbors : 0 Number of CDP neighbors : 0 Number of sent optional TLV : 16 Number of received unknown TLV : 0 The

178 [SwitchA] traffic classifier app_c operator or [SwitchA-classifier-app_c] if-match acl 4000 [SwitchA-classifier-app_c] quit # Create a traffic b

8 To configure PFC on an Ethernet interface: Step Command Remarks 1. Enter system view. system-view N/A 2. Enter Ethernet interface view. interfac

179 DCBX Parameter Type and Length DCBX Parameter Length: 13 DCBX Parameter Type: 2 DCBX Parameter Information Parameter Ty

180 Priority Group ID of Priority 4: 4 Priority Group ID of Priority 7: 7 Priority Group ID of Priority 6: 6 Prior

181 DCBX Parameter Length: 2 DCBX Parameter Type: 3 DCBX Parameter Information Parameter Type: Current Pad Byte Pre

182 PFC Enabled on Priority 2: No PFC Enabled on Priority 3: Yes PFC Enabled on Priority 4: No PFC Enabled on Priori

183 Configuring service loopback groups A service loopback group contains one or multiple Ethernet ports for looping packets sent out by the device

184 Task Command Display information about the service loopback group. display service-loopback group [ number ] Service loopback group configurat

185 Index Numerics 802.x 802.1 LLDPDU TLV types, 15 4 802.3 LLDPDU TLV types, 15 4 802.X 802.1Q-in-802.1Q. Use QinQ 802.x 802.1p-to-local priority

186 MST regional root, 70 MSTP root bridge configuration, 78 MSTP secondary root bridge configuration, 78 RSTP root bridge configuration, 78 RSTP se

187 loop detection protection action (Layer 2 aggregate interface), 105 loop detection protection action (Layer 2 Ethernet interface), 105 loopback

188 LLDP ETS parameter configuration, 169 LLDP PFC parameter configuration, 170 LLDP+DCBX TLV advertisement, 167 default Ethernet link aggregate i

Copyright © 2014, Hangzhou H3C Technologies Co., Ltd. and its licensors All rights reserved No part of this manual may be reproduced or transmitted i

9 Setting the statistics polling interval Step Command Remarks 1. Enter system view. system-view N/A 2. Enter Ethernet interface view. interface in

189 STP feature, 87 STP loop guard, 94 STP port state transition information output, 87 STP root guard, 93 STP TC-BPDU guard, 96 encapsulating LLDPD

190 member port state, 35, 37, 40 modes, 37 operational key, 36 reference port, 39 reference port choice, 37 static mode, 37 traffic redirection, 49

191 Ethernet aggregate interface (description), 44 Ethernet aggregate interface configuration, 44 Ethernet link aggregate interface default settings

192 VLAN port-based configuration, 112 , 117 Layer 2 Ethernet interface cable connection, 13 configuration, 1, 10 fiber port, 9 mode, 12 storm co

193 receiving, 157 TLV basic management types, 15 4 TLV LLDP-MED types, 154 TLV organization-specific types, 154 transmitting, 157 load balanci

194 RSTP, 96 STP, 96 VLAN, 116 management address LLDP encoding format, 162 management Ethernet interface configuration, 1 mapping MSTP VLAN-to-ins

195 Ethernet interface common settings configuration, 1 Ethernet interface generic flow control, 6 Ethernet interface jumbo frame support configurat

196 inloopback interface configuration, 15 interface bulk configuration, 18 Layer 2 Ethernet link aggregation (dynamic), 52 Layer 2 Ethernet link a

197 polling LLDP enable, 160 polling interval, 9 port Ethernet aggregate interface (description), 44 Ethernet aggregate interface configuration, 44

198 STP port priority configuration, 85 STP port role restriction, 95 STP port state transition output, 87 STP root guard, 93 STP root port, 62 STP

10 Configuration restrictions and guidelines When you forcibly bring up a fiber port, follow these guidelines: • The port up-mode command is mutually

199 configuring LLDP 802.1p-to-local priority mapping, 169 configuring LLDP advertisable TLVs, 161 configuring LLDP APP parameters, 167 configuri

200 configuring VLAN mapping, 14 3 , 14 6 configuring VLAN mapping (one-to-one), 14 4 , 14 6 configuring VLAN mapping (one-to-two), 14 5 , 14 8 c

201 specifying STP port path cost calculation standard, 83 splitting 40-GE interface into 10-GE interfaces, 2 testing Layer 2 Ethernet interface cab

202 configuration, 61 , 73, 74, 97 device priority configuration, 79 displaying, 96 maintaining, 96 mode set, 76 network convergence, 68 No Agreemen

203 IST, 70 loop detection, 61 loop guard enable, 94 maintaining, 96 mCheck, 88 mCheck (global), 88 mCheck (interface view), 88 mode set, 76 MST co

204 QinQ CVLAN tag, 128 QinQ SVLAN tag, 128 QinQ SVLAN tag 802.1p priority, 13 3 QinQ VLAN tag TPID value, 132 SVLAN TPID value, 132 VLAN mappi

205 QinQ configuration, 128 , 131 , 13 4 QinQ CVLAN tag, 128 QinQ CVLAN TPID value, 132 QinQ implementation, 13 0 QinQ SVLAN tag, 128 QinQ SVLA

11 Step Command Remarks 1. Enter system view. system-view N/A 2. Enter Ethernet interface view. interface interface-type interface-number N/A 3.

12 Configuration procedure To configure storm control on an Ethernet interface: Step Command Remarks 1. Enter system view. system-view N/A 2. (Opt

13 • Typically, set the MDIX mode of the interface to AutoMDIX. Set the MDIX mode of the interface to MDI or MDIX only when the device cannot determi

14 Task Command Display traffic rate statistics of interfaces in up state over the last sampling interval. display counters rate { inbound | outbound

15 Configuring loopback, null, and inloopback interfaces This chapter describes how to configure a loopback interface, a null interface, and an inloo

16 Configuring a null interface A null interface is a virtual interface and is always up, but you can neither use it to forward data packets nor can

17 Task Command Clear the statistics on the inloopback interface. reset counters interface

18 Bulk configuring interfaces You can enter interface range view to bulk configure multiple interfaces with the same feature instead of configuring

Preface The H3C S12500-X documentation set includes 14 configuration guides. These guides describe the software features for the H3C S12500-X Switch S

19 Step Command Remarks 4. Use available commands to configure the interfaces. Available commands vary by interface. N/A 5. (Optional.) Verify th

20 Configuring the MAC address table Overview An Ethernet device uses a MAC address table to forward frames. A MAC address entry contains a destinati

21 • Static entries—Static entries are manually added in order to forward frames with a specific destination MAC address out of their associated int

22 Type Description Multiport unicast MAC address entry • Learns the MAC address (for example, MAC A) of the frame, adds a dynamic MAC address entry

23 Step Command Remarks 2. Add or modify a blackhole MAC address entry. mac-address blackhole mac-address vlan vlan-id By default, no blackhole MAC

24 Configuring a multiport unicast MAC address entry on an interface Step Command Remarks 1. Enter system view. system-view N/A 2. Enter interfac

25 Disabling MAC address learning on interfaces With global MAC address learning enabled, you can disable MAC address learning on a single interface.

26 Set the aging timer appropriately. A stable network requires a longer aging interval and an unstable network requires a shorter aging interval. A

27 Step Command Remarks 2. Enter Layer 2 Ethernet interface view.. interface interface-type interface-number N/A 3. Enable the device to forward fr

28 To avoid unnecessary floods and improve forwarding speed, make sure all cards possess the same MAC address table. After you enable MAC address tab

Convention Description bars, from which you select one choice, multiple choices, or none. &<1-n> The argument or keyword and argument combi

29 Step Command Remarks 1. Enter system view. system-view N/A 2. Enable MAC address synchronization. mac-address mac-roaming enable By default, M

30 Configuration procedure # Add a static MAC address entry for MAC address 000f-e235-dc71 on Ten-GigabitEthernet 1/0/1 that belongs to VLAN 1. <D

31 Configuring MAC Information The MAC Information feature can generate syslog messages or SNMP notifications when MAC address entries are learned or

32 Configuring the MAC Information mode The following MAC Information modes are available for sending MAC address changes: • Syslog—The device sends

33 MAC Information configuration example Network requirements Enable MAC Information on interface Ten-GigabitEthernet 1/0/1 on Device in Figure 6 to

34 local4.info /var/log/Device/info.log In this configuration, local4 is the name of the logging facility that the log host uses to receive logs, and

35 Configuring Ethernet link aggregation Ethernet link aggregation bundles multiple physical Ethernet links into one logical link, called an aggregat

36 • Unselected—An Unselected port cannot forward traffic. Operational key When aggregating ports, the system automatically assigns each port an ope

37 Link aggregation modes Link aggregation has dynamic and static modes: • Static aggregation mode—Aggregation is stable. The aggregation state of t

38 Figure 8 Setting the aggregation state of a member port in a static aggregation group The maximum number of Selected ports in a static aggregati

Represents a security product, such as a firewall, UTM, multiservice security gateway, or load-balancing device. Represents a security card, such as

39 LACP functions LACP offers basic LACP functions and extended LACP functions, as described in Table 3. Table 3 Basic and extended LACP functions Ca

40 The local system (the actor) and the remote system (the partner) negotiate a reference port by using the following workflow: 1. Compare the syst

41 Figure 9 Setting the state of a member port in a dynamic aggregation group Meanwhile, the system with the higher system ID, being aware of the a

42 • A port that joins a dynamic aggregation group after the Selected port limit has been reached is placed in Selected state if it is more eligible

43 { Port security (see Security Configuration Guide) { 802.1X (see Security Configuration Guide) { Association between AC and cross connection (s

44 Step Command Remarks 2. Set the system LACP priority. lacp system-priority system-priority By default, the system LACP priority is 32768. Chan

45 Step Command Remarks 2. Enter Layer 2 aggregate interface view. interface bridge-aggregation interface-number N/A 3. Configure the description

46 The maximum number of Selected ports allowed in an aggregation group is limited by either the configured maximum number or hardware capability, wh

47 • When an aggregate interface is brought up, the aggregation state of ports in the corresponding aggregation group is recalculated. To shut down

48 Step Command Remarks 2. Configure the global link-aggregation load sharing criteria. link-aggregation global load-sharing mode { destination-ip

i Contents Configuring Ethernet interfaces ··········································································································

49 Enabling local-first load sharing for link aggregation Use the local-first load sharing mechanism in a multi-device link aggregation scenario to d

50 Configuration restrictions and guidelines When you enable link-aggregation traffic redirection, follow these restrictions and guidelines: • Link-

51 Ethernet link aggregation configuration examples Layer 2 static aggregation configuration example Network requirements As shown in Figure 11, conf

52 [DeviceA] interface ten-gigabitethernet 1/0/3 [DeviceA-Ten-GigabitEthernet1/0/3] port link-aggregation group 1 [DeviceA-Ten-GigabitEthernet1/0/3]

53 Figure 12 Network diagram Configuration procedure 1. Configure Device A: # Create VLAN 10, and assign the port Ten-GigabitEthernet 1/0/4 to VLA

54 [DeviceA-Bridge-Aggregation1] quit 2. Configure Device B in the same way Device A is configured. (Details not shown.) Verifying the configuration

55 Figure 13 Network diagram Configuration procedure 1. Configure Device A: # Create VLAN 10, and assign the port Ten-GigabitEthernet 1/0/5 to VLA

56 [DeviceA] interface bridge-aggregation 2 [DeviceA-Bridge-Aggregation2] link-aggregation load-sharing mode destination-mac [DeviceA-Bridge-Aggregat

57 Bridge-Aggregation1 Load-Sharing Mode: source-mac address Bridge-Aggregation2 Load-Sharing Mode: destination-mac address The output shows that t

58 Configuring port isolation The port isolation feature isolates Layer 2 traffic for data privacy and security without using VLANs. You can also use

ii Configuration procedure ···························································································································

59 Task Command Display isolation group information display port-isolate group [ group-number ] [ | { begin | exclude | include } regular-expression

60 Verifying the configuration # Display information about isolation group 2. [Device-Ten-GigabitEthernet1/0/3] display port-isolate group 2 Port i

61 Configuring spanning tree protocols Spanning tree protocols eliminate loops in a physical link-redundant network by selectively blocking redundant

62 Basic concepts in STP Root bridge A tree network must have a root bridge. The entire network contains only one root bridge, and all the other brid

63 Calculation process of the STP algorithm The spanning tree calculation process described in the following sections is a simplified process for exa

64 Step Actions 2 The device compares the configuration BPDUs of all the ports and chooses the optimum configuration BPDU. The following are the pr

65 Device Port name Configuration BPDU on the port Port B2 {1, 0, 1, Port B2} Device C Port C1 {2, 0, 2, Port C1} Port C2 {2, 0, 2, Port C2} 2.

66 Device Comparison process Configuration BPDU on ports after comparison Device C • Port C1 receives the configuration BPDU of Port A2 {0, 0, 0, P

67 Figure 17 The final calculated spanning tree The configuration BPDU forwarding mechanism of STP The configuration BPDUs of STP are forwarded ac

68 The device uses the max age to determine whether a stored configuration BPDU has expired and discards it if the max age is exceeded. RSTP RSTP ach

iii Configuration procedure ··························································································································

69 Figure 18 Basic concepts in MSTP Figure 19 Network diagram and topology of MST region 3 MST region A multiple spanning tree region (MST regio

70 • Same VLAN-to-instance mapping configuration • Same MSTP revision level • Physically linked together Multiple MST regions can exist in a switc

71 Port roles A port can play different roles in different MSTIs. As shown in Figure 20, an MST region comprises Device A, Device B, Device C, and De

72 • Forwarding—The port receives and sends BPDUs, learns MAC addresses, and forwards user traffic. • Learning—The port receives and sends BPDUs, l

73 MSTP implementation on devices MSTP is compatible with STP and RSTP. Devices that are running MSTP and that are used for spanning tree calculation

74 • Though the member ports of an aggregation group do not participate in spanning tree calculation, the ports still reserve their spanning tree co

75 Tasks at a glance Configuring the leaf nodes: • (Required.) Setting the spanning tree mode • (Optional.) Configuring the device priority • (Opt

76 Tasks at a glance Configuring the leaf nodes: • (Required.) Setting the spanning tree mode • (Required.) Configuring an MST region • (Optional.

77 NOTE: • In STP or RSTP mode, do not specify an MSTI. Otherwise, the spanning tree configuration does not takeeffect. • In MSTP mode, if you sp

78 Configuring the root bridge or a secondary root bridge You can have the spanning tree protocol determine the root bridge of a spanning tree throug

iv Configuration procedure ···························································································································

79 Configuring the device priority Device priority is a factor in calculating the spanning tree. The priority of a device determines whether the devi

80 devices. The network diameter is a parameter that indicates the network size. A bigger network diameter indicates a larger network size. Based on

81 loss for a link failure and triggers a new spanning tree calculation process. If the hello time is too short, the device frequently sends the same

82 Configuring the BPDU transmission rate The maximum number of BPDUs a port can send within each hello time equals the BPDU transmission rate plus t

83 Configuring path costs of ports Path cost is a parameter related to the rate of a port. On a spanning tree device, a port can have different path

84 Table 9 Mappings between the link speed and the path cost Link speed Port type Path cost IEEE 802.1d-1998 IEEE 802.1t Private standard 0 N/A 6

85 Step Command Remarks 3. Configure the path cost of the ports. • In STP/RSTP mode: stp cost cost • In MSTP mode: stp [ instance instance-list ]

86 Configuring the port link type A point-to-point link directly connects two devices. If two root ports or designated ports are connected over a poi

87 A port in auto mode sends 802.1s MSTP packets by default. When the port receives an MSTP packet of a legacy format, the port starts to send packet

88 Step Command Remarks 4. (Optional.) Enable the spanning tree feature for the port. stp enable By default, the spanning tree feature is enabled on