H3C SR8800 IM-FW-II, Руководство по настройке, Страница: 66 / 159

56
Configuring the Digest Snooping feature
You can enable Digest Snooping only on the H3C router that is connected to a third-party device that
uses its private key to calculate the configuration digest.
To configure Digest Snooping:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter interface view or port group
view.
•
Enter Ethernet interface view or
Layer 2 aggregate interface
view :
interface interface-type
interface-number
•
Enter port group view :
port-group manual
port-group-name
Use either command.
3. Enable Digest Snooping on the
interface or port group.
stp config-digest-snooping
By default, Digest Snooping
is disabled on a port.
4. Return to system view. quit N/A
5.
Enable global Digest Snooping.
stp config-digest-snooping
By default, Digest Snooping
is disabled globally.
CAUTION:
•
With the Digest Snooping feature enabled, comparison of configuration digest is not needed for
in-the-same-region check, so the VLAN-to-instance mappings must be the same on associated ports.
• With global Digest Snooping enabled, modification of VLAN-to-instance mappings and removing of
the current region configuration using the
undo stp region-configuration command are not allowed.
You can only modify the region name and revision level.
•
You must enable Digest Snooping both globally and on associated ports to make it take effect. To make
the configuration effective on all configured ports and while reducing impact on the network, enable
Digest Snooping on all associated ports first and then globally.
•
To prevent loops, do not enable Digest Snooping on MST region edge ports.
•
H3C recommends you to enable Digest Snooping first and then the spanning tree feature. To avoid
traffic interruption, do not configure Digest Snooping when the network works well.
Digest Snooping configuration example
1.
Network requirements
As shown in
Figure 17 , Device A and Device B connect to Device C, which is a third-party device.
All these devices are in the same region.
Enable Digest Snooping on Device A’s and Device B’s ports that connect to Device C, so that the
three devices can communicate with one another.