manualshive.com logo in svg

HP 3100 Series, Руководство по настройке

Серия Paradyne 3100 — это инновационное семейство продуктов с быстрой установкой и руководством для пользователей. Скачайте бесплатно руководства по установке и использованию с manualshive.com. Узнайте о функциях и преимуществах этого продукта, чтобы использовать его в полную силу.

Поделиться
Скачать
background image

 

84 

Figure 23 TC snooping application scenario 

 

 

In the network, Device transparently transmits the received BPDUs and does not participate in 
spanning tree calculations. When a topology change occurs to user networks, Device may need a 
long time to learn the correct MAC address table entries and ARP entries, resulting in long network 
disruption. To avoid the network disruption, you can enable TC snooping on Device.  

With TC snooping enabled, a device actively updates the MAC address table entries and ARP 
entries upon receiving TC-BPDUs, so that the device can normally forward the user traffic.  

For more information about MAC address table entries, see "Configuring the MAC address table." 

For more information about ARP, see 

Layer 3—IP Services Configuration Guide

. 

Configuration restrictions and guidelines 

•

 

TC snooping and STP are mutually exclusive. You must globally disable the spanning tree 
feature before enable TC snooping. 

•

 

TC snooping does not take effect on the ports on which BPDU tunneling is enabled for spanning 
tree protocols. For more information about BPDU tunneling, see "Configuring BPDU tunneling." 

•

 

TC snooping does not support PVST TC-BPDUs. As a result, TC snooping does not take effect 
in a PVST network.  

Configuration procedure 

To configure TC snooping: 

 

Step Command 

Description 

1. 

Enter system view. 

system-view 

N/A 

2. 

Globally disable the 
spanning tree feature. 

undo stp enable 

By default, the spanning tree 
feature is disabled globally. 

3. 

Enable TC snooping. 

stp tc-snooping 

Disabled by default. 

 

Configuring protection functions

 

A spanning tree device supports the following protection functions: 

User network 1

User network 2

Device

Содержание 3100 Series

Страница 1: ...HPE 3100 v2 Switch Series Layer 2 LAN Switching Configuration Guide Part number 5998 5991s Software version Release 5213 and Release 5213P02 Document version 6W101 20160506 ...

Страница 2: ...nd 12 212 Commercial Computer Software Computer Software Documentation and Technical Data for Commercial Items are licensed to the U S Government under vendor s standard commercial license Links to third party websites take you outside the Hewlett Packard Enterprise website Hewlett Packard Enterprise has no control over and is not responsible for information outside the Hewlett Packard Enterprise ...

Страница 3: ...he cable connection of an Ethernet interface 12 Configuring storm control on an Ethernet interface 12 Configuration restrictions and guidelines 13 Configuration procedure 13 Displaying and maintaining an Ethernet interface 14 Configuring loopback and null interfaces 15 Configuring a loopback interface 15 Introduction to the loopback interface 15 Configuration procedure 15 Configuring a null interf...

Страница 4: ... group 35 Configuration guidelines 35 Configuring a static aggregation group 36 Configuring a dynamic aggregation group 37 Configuring an aggregate interface 38 Configuring the description of an aggregate interface 38 Enabling link state traps for an aggregate interface 38 Limiting the number of Selected ports for an aggregation group 38 Shutting down an aggregate interface 39 Restoring the defaul...

Страница 5: ...edure 72 Configuring path costs of ports 72 Specifying a standard for the device to use when it calculates the default path cost 72 Configuring path costs of ports 74 Configuration example 74 Configuring the port priority 75 Configuring the port link type 75 Configuration restrictions and guidelines 75 Configuration procedure 76 Configuring the mode a port uses to recognize send MSTP packets 76 En...

Страница 6: ...Introduction to port based VLAN 107 Assigning an access port to a VLAN 109 Assigning a trunk port to a VLAN 110 Assigning a hybrid port to a VLAN 111 Port based VLAN configuration example 112 Configuring MAC based VLANs 114 Introduction to MAC based VLAN 114 Configuration restrictions and guidelines 114 Configuration procedure 115 MAC based VLAN configuration example 116 Configuring protocol based...

Страница 7: ...aintaining GVRP 143 GVRP configuration examples 144 GVRP normal registration mode configuration example 144 GVRP fixed registration mode configuration example 145 GVRP forbidden registration mode configuration example 147 Configuring QinQ 149 Overview 149 Background and benefits 149 How QinQ works 149 QinQ frame structure 150 Implementations of QinQ 151 Modifying the TPID in a VLAN tag 151 Protoco...

Страница 8: ... LLDP reinitialization delay 182 Enabling LLDP polling 182 Configuring the advertisable TLVs 182 Configuring the management address and its encoding format 183 Setting other LLDP parameters 183 Setting an encapsulation format for LLDP frames 184 Configuring CDP compatibility available only on the HPE 3100 v2 EI 185 Configuration prerequisites 186 Configuration procedure 186 Configuring LLDP trappi...

Страница 9: ... and icons 209 Conventions 209 Network topology icons 210 Support and other resources 211 Accessing Hewlett Packard Enterprise Support 211 Accessing updates 211 Websites 212 Customer self repair 212 Remote support 212 Documentation feedback 212 Index 214 ...

Страница 10: ...e following tasks For the number of combo interfaces that an HPE 3100 v2 switch provides see the installation guide Use the display interface command to determine which port fiber or copper of the combo interface is active If the current port is the copper port the output will include Media type is twisted pair Port hardware type is 1000_BASE_T If the current port is the fiber port the output will...

Страница 11: ...ace name Interface For example Ethernet1 0 1 Interface 4 Set the duplex mode of the interface duplex auto full half Optional By default the duplex mode is auto for Ethernet interfaces The half keyword is not applicable to Ethernet copper ports that are configured with a 1000 Mbps port speed and fiber ports 5 Set the port speed speed 10 100 1000 auto Optional By default an Ethernet interface automa...

Страница 12: ... You can narrow down the speed option list for negotiation Figure 1 Speed auto negotiation application scenario As shown in Figure 1 all ports on Switch A are operating in speed auto negotiation mode with the highest speed of 100 Mbps If the transmission rate of each server in the server cluster is 100 Mbps their total transmission rate will exceed the capability of port Ethernet 1 0 4 the port pr...

Страница 13: ...Port B forward packets at the rate of 1000 Mbps Port C is congested To avoid packet loss enable flow control on Port A and Port B Figure 2 Flow control on ports Configure flow control in TxRx mode on Port B and flow control in Rx mode on Port A When congestion occurs on Port C Switch B buffers frames When the amount of buffered frames exceeds a certain value Switch B sends a common Pause frame out...

Страница 14: ...o shutdown command the interface reports the event to the upper layers immediately Link down event suppression enables an interface to suppress link down events and start a delay timer each time the physical link goes down During this delay the interface does not report the link down event and the display interface brief or display interface command displays the interface state as UP If the physic...

Страница 15: ...rnal loopback testing on an Ethernet interface connect a loopback plug to the Ethernet interface The switch sends test packets out of the interface which are expected to loop over the plug and back to the interface If the interface fails to receive any test packet the hardware of the interface is faulty An Ethernet interface in a loopback test does not forward data traffic Configuration restrictio...

Страница 16: ...e interfaces on your switch might use the same set of settings To configure these interfaces in bulk rather than one by one you can assign them to a port group You create port groups manually All settings made for a port group apply to all the member ports of the group Even though the settings are made on the port group they are saved on each interface basis rather than on a port group basis You c...

Страница 17: ...er Ethernet interface view To configure storm suppression on a group of Ethernet interfaces enter port group view 3 Set the broadcast suppression threshold ratio broadcast suppression ratio kbps max kbps Optional By default all broadcast traffic is allowed to pass through 4 Set the multicast suppression threshold ratio multicast suppression ratio kbps max kbps Optional By default all multicast tra...

Страница 18: ...k occurs when a switch receives a packet that it sent and the receiving interface is the same as the sending interface as shown in Figure 3 Multi port loopback A multi port loopback occurs when a switch receives a packet that it sent but the receiving interface might not be the sending interface as shown in Figure 4 Figure 3 Single port loopback Figure 4 Multi port loopback You can enable loopback...

Страница 19: ...he function both globally and on the interface When you enable multi port loopback detection on a switch both single port and multi port loops can be detected To disable loopback detection on all interfaces run the undo loopback detection enable command in system view To enable a hybrid or trunk port to take the administratively specified protective action you must use the loopback detection contr...

Страница 20: ...es not receive or send packets the system generates traps and log messages and deletes all MAC address entries of the looped interface With the shutdown keyword specified the switch shuts down the looped ports and set their physical state to Loop down When a looped port recovers you must use the undo shutdown command to restore its forwarding capability Setting the MDI mode of an Ethernet interfac...

Страница 21: ...T Fiber ports do not support this feature If the link of an Ethernet port is up testing its cable connection will cause the link to come down and then go up You can test the cable connection of an Ethernet interface for a short or open circuit The switch displays cable test results within five seconds If any fault is detected the test results include the length of the faulty cable segment To test ...

Страница 22: ...uidelines For network stability use the default or set a higher traffic polling interval Storm control uses a complete polling cycle to collect traffic data and analyzes the data in the next cycle It takes a port at least one polling interval and at most two polling intervals to take a storm control action The storm control function allows you to set the upper and lower thresholds for all three ty...

Страница 23: ...terface interface type begin exclude include regular expression Available in any view Display traffic rate statistics over the last sampling interval display counters rate inbound outbound interface interface type begin exclude include regular expression Available in any view Display information about a manual port group or all manual port groups display port group manual all name port group name ...

Страница 24: ... identifications When you configure a rule on an authentication or security server to permit or deny packets generated by a device you can simplify the rule by configuring it to permit or deny packets that carry the loopback interface address identifying the device When you use a loopback interface address as the source address of IP packets be sure to perform any necessary routing configuration t...

Страница 25: ... 255 0 0 null 0 command which configures a static route that leads to null interface 0 you can have all the packets destined to the network segment 92 101 0 0 16 discarded Only one null interface Null 0 is supported on your switch You cannot remove or create a null interface Configuration procedure Step Command Remarks 1 Enter system view system view N A 2 Enter null interface view interface null ...

Страница 26: ...clude regular expression display interface null 0 brief description begin exclude include regular expression Available in any view Clear the statistics on a loopback interface reset counters interface loopback 0 Available in user view Clear the statistics on the null interface reset counters interface null 0 Available in user view ...

Страница 27: ...Some commands after being executed on both an aggregate interface and its member interfaces can break up the aggregation No limit is set on the maximum number of interfaces in an interface range The more interfaces in an interface range the longer the command execution time Configuration procedure To bulk configure interfaces Step Command Remarks 1 Enter system view system view N A 2 Enter interfa...

Страница 28: ...1 AGING 1 mac address es found How a MAC address table entry is created The switch automatically obtains entries in the MAC address table or you can add them manually MAC address learning The device can automatically populate its MAC address table by obtaining the source MAC addresses called MAC address learning of incoming frames on each port When a frame arrives at a port Port A for example the ...

Страница 29: ...able space an aging mechanism is adopted for dynamic MAC address entries Each time a dynamic MAC address entry is obtained or created an aging time starts If the entry has not updated when the aging timer expires the device deletes the entry If the entry has updated before the aging timer expires the aging timer restarts MAC address table based frame forwarding When forwarding a frame the device a...

Страница 30: ...have created the VLAN and assigned the interface to the VLAN Configuring a blackhole MAC address entry Step Command Remarks 1 Enter system view system view N A 2 Add or modify a blackhole MAC address entry mac address blackhole mac address vlan vlan id By default no MAC address entry is configured Make sure that you have created the VLAN Disabling MAC address learning Sometimes you might need to d...

Страница 31: ...N Step Command Remarks 1 Enter system view system view N A 2 Enter VLAN view vlan vlan id N A 3 Disable MAC address learning on the VLAN mac address mac learning disable Enabled by default Configuring the aging timer for dynamic MAC address entries The MAC address table uses an aging timer for dynamic MAC address entries for security and efficient use of table space If a dynamic MAC address entry ...

Страница 32: ...l member ports in the port group 3 Configure the MAC learning limit on the interface or port group mac address max mac count count No MAC learning limit is configured by default Layer 2 aggregate interfaces do not support this command NOTE Do not configure the MAC learning limit on any member ports of an aggregation group Otherwise the member ports cannot be selected Enabling MAC address migration...

Страница 33: ...ression Available in any view Display the system or interface MAC address learning state display mac address mac learning interface type interface number begin exclude include regular expression Available in any view Display MAC address statistics display mac address statistics begin exclude include regular expression Available in any view MAC address table configuration example Network requiremen...

Страница 34: ...ing 500 Display the MAC address entry for port Ethernet 1 0 1 Sysname display mac address interface ethernet 1 0 1 MAC ADDR VLAN ID STATE PORT INDEX AGING TIME s 000f e235 dc71 1 Config static Ethernet 1 0 1 NOAGED 1 mac address es found Display information about the blackhole MAC address table Sysname display mac address blackhole MAC ADDR VLAN ID STATE PORT INDEX AGING TIME s 000f e235 abcd 1 Bl...

Страница 35: ...end The device writes information and sends messages only for the following MAC addresses automatically learned source MAC addresses MAC addresses that pass MAC authentication MAC addresses that pass 802 1X authentication MAC addresses matching OUI addresses in the voice VLAN feature and secure MAC addresses The device does not write information or send messages for blackhole MAC address static MA...

Страница 36: ...ing Syslog or trap messages mac address information interval interval time Optional One second by default Configuring the MAC Information queue length If the MAC Information queue length is 0 the device sends a Syslog or trap message immediately after learning or deleting a MAC address If it is not 0 the device stores MAC address changes in the queue When the timer set for sending Syslog or trap m...

Страница 37: ...ide 2 Enable MAC Information Enable MAC Information on Device Device system view Device mac address information enable Configure MAC Information mode as Syslog Device mac address information mode syslog Enable MAC Information on Ethernet 1 0 1 Device interface ethernet 1 0 1 Device Ethernet1 0 1 mac address information enable added Device Ethernet1 0 1 mac address information enable deleted Device...

Страница 38: ... link aggregation service a link aggregation group appears to be a single logical link and data traffic is transmitted through the aggregate interface The rate of an aggregate interface equals the total rate of its member ports in the Selected state and its duplex mode is the same as the selected member ports For more information about the states of member ports in an aggregation group see Aggrega...

Страница 39: ...nge a class two configuration setting on a member port Class one configurations Include settings that do not affect the aggregation state of the member port even if they are different from those on the aggregate interface GVRP and MSTP settings are examples of class one configurations The class one configuration for a member port is effective only when the member port leaves the aggregation group ...

Страница 40: ...l the member port assumes that the peer port has failed You can configure the LACP timeout interval as either the short timeout interval 1 second or the long timeout interval 30 seconds Link aggregation modes Link aggregation has the following modes dynamic and static Dynamic link aggregation uses LACP and static link aggregation does not Table 5 compares the two aggregation modes Table 5 A compar...

Страница 41: ...t aggregation priority value Full duplex high speed Full duplex low speed Half duplex high speed Half duplex low speed The one at the top is chosen as the reference port If two ports have the same aggregation priority duplex mode and speed the one with the lower port number is chosen Setting the aggregation state of each member port After selecting the reference port the static aggregation group s...

Страница 42: ...r system ID chooses the port with the smallest port ID as the reference port A port ID contains a port aggregation priority and a port number The port with the lower aggregation priority value is chosen If two ports have the same aggregation priority the system compares their port numbers The port with the smaller port number is chosen Setting the aggregation state of each member port After the re...

Страница 43: ...s exist in the group When the aggregation state of a member port changes the aggregation state of its peer port also changes After the Selected port limit has been reached a port assigned to the dynamic aggregation group is placed in Selected state if it is more eligible for being selected than a current member port The port assigned to the dynamic aggregation group after the Selected port limit h...

Страница 44: ...t link aggregation configuration task list Task Remarks Configuring an aggregation group Configuring a static aggregation group Select either task Configuring a dynamic aggregation group Configuring an aggregate interface Configuring the description of an aggregate interface Optional Enabling link state traps for an aggregate interface Optional Limiting the number of Selected ports for an aggregat...

Страница 45: ...t the ports at both ends of each link are in the same aggregation state Configuring a Layer 2 static aggregation group Step Command Remarks 1 Enter system view system view N A 2 Create a Layer 2 aggregate interface and enter Layer 2 aggregate interface view interface bridge aggregation interface number When you create a Layer 2 aggregate interface the system automatically creates a Layer 2 static ...

Страница 46: ...gregation group numbered the same 4 Configure the aggregation group to operate in dynamic aggregation mode link aggregation mode dynamic By default an aggregation group operates in static aggregation mode 5 Exit to system view quit N A 6 Assign an Ethernet interface to the aggregation group a Enter Layer 2 Ethernet interface view interface interface type interface number b Assign the Ethernet inte...

Страница 47: ... its link goes up and linkDown trap messages when its link goes down For more information see Network Management and Monitoring Configuration Guide To enable link state traps on an aggregate interface Step Command Remarks 1 Enter system view system view N A 2 Enable the trap function globally snmp agent trap enable standard linkdown linkup Optional By default link state trapping is enabled globall...

Страница 48: ...n group Step Command Remarks 1 Enter system view system view N A 2 Enter Layer 2 aggregate interface view interface bridge aggregation interface number N A 3 Set the minimum number of Selected ports for the aggregation group link aggregation selected port minimum number Not specified by default Shutting down an aggregate interface Shutting down or bringing up an aggregate interface affects the agg...

Страница 49: ...s Broadcast packets and multicast packets always use the default load sharing criteria Configuring the global link aggregation load sharing criteria Step Command Remarks 1 Enter system view system view N A 2 Configure the global link aggregatio n load sharing criteria link aggregation load sharing mode destination ip destination mac source ip source mac By default the system selects the global loa...

Страница 50: ...ression Available in any view Clear LACP statistics for the specified link aggregation member ports reset lacp statistics interface interface list Available in user view Clear statistics for the specified aggregate interfaces reset counters interface bridge aggregation interface number Available in user view Ethernet link aggregation configuration examples In an aggregation group only ports that h...

Страница 51: ...3 to link aggregation group 1 DeviceA interface ethernet 1 0 1 DeviceA Ethernet1 0 1 port link aggregation group 1 DeviceA Ethernet1 0 1 quit DeviceA interface ethernet 1 0 2 DeviceA Ethernet1 0 2 port link aggregation group 1 DeviceA Ethernet1 0 2 quit DeviceA interface ethernet 1 0 3 DeviceA Ethernet1 0 3 port link aggregation group 1 DeviceA Ethernet1 0 3 quit Configure Layer 2 aggregate interf...

Страница 52: ...d shared Layer 2 static aggregation group and it contains three Selected ports Display the global link aggregation load sharing criteria on Device A DeviceA display link aggregation load sharing mode Link Aggregation Load Sharing Mode destination mac address source mac address The output shows that all link aggregation groups created on the device perform load sharing based on source and destinati...

Страница 53: ...thernet 1 0 1 through Ethernet 1 0 3 to link aggregation group 1 one at a time DeviceA interface ethernet 1 0 1 DeviceA Ethernet1 0 1 port link aggregation group 1 DeviceA Ethernet1 0 1 quit DeviceA interface ethernet 1 0 2 DeviceA Ethernet1 0 2 port link aggregation group 1 DeviceA Ethernet1 0 2 quit DeviceA interface ethernet 1 0 3 DeviceA Ethernet1 0 3 port link aggregation group 1 DeviceA Ethe...

Страница 54: ...Aggregation Mode S Static D Dynamic Loadsharing Type Shar Loadsharing NonS Non Loadsharing Actor System ID 0x8000 000f e2ff 0001 AGG AGG Partner ID Select Unselect Share Interface Mode Ports Ports Type BAGG1 D 0x8000 000f e2ff 0002 3 0 Shar The output shows that link aggregation group 1 is a load shared Layer 2 dynamic aggregation group and it contains three Selected ports Display the global link ...

Страница 55: ...erface type interface number Enter Layer 2 aggregate interface view interface bridge aggregation interface number Enter port group view port group manual port group name Use one of the commands In Ethernet interface view the subsequent configurations apply to the current port In Layer 2 aggregate interface view the subsequent configurations apply to the Layer 2 aggregate interface and all its memb...

Страница 56: ...erface ethernet 1 0 1 Device Ethernet1 0 1 port isolate enable Device Ethernet1 0 1 quit Device interface ethernet 1 0 2 Device Ethernet1 0 2 port isolate enable Device Ethernet1 0 2 quit Device interface ethernet 1 0 3 Device Ethernet1 0 3 port isolate enable Display information about the isolation group Device display port isolate group Port isolate group information Uplink port support NO Group...

Страница 57: ...ls derived from that protocol STP protocol packets STP uses bridge protocol data units BPDUs also known as configuration messages as its protocol packets STP enabled network devices exchange BPDUs to establish a spanning tree BPDUs contain sufficient information for the network devices to complete spanning tree calculation STP uses the following types of BPDUs Configuration BPDUs Used by network d...

Страница 58: ...ports Classification Designated bridge Designated port For a device Device directly connected with the local device and responsible for forwarding BPDUs to the local device Port through which the designated bridge forwards BPDUs to this device For a LAN Device responsible for forwarding BPDUs to this LAN segment Port through which the designated bridge forwards BPDUs to this LAN segment As shown i...

Страница 59: ... is replaced with the ID of this device The designated port ID is replaced with the ID of this port 3 The device compares the calculated configuration BPDU with the configuration BPDU on the port whose port role will be defined and acts depending on the result of the comparison If the calculated configuration BPDU is superior the device considers this port as the designated port replaces the confi...

Страница 60: ...algorithm works This example shows a simplified spanning tree calculation process Figure 14 The STP algorithm As shown in Figure 14 the priority values of Device A Device B and Device C are 0 1 and 2 and the path costs of links among the three devices are 5 10 and 4 respectively 4 Initial state of each device Table 10 Initial state of each device Device Port name Configuration BPDU on the port Dev...

Страница 61: ...0 0 Port A1 finds that the received configuration BPDU is superior to its existing configuration BPDU 1 0 1 Port B1 and updates its configuration BPDU Port B2 receives the configuration BPDU of Port C2 2 0 2 Port C2 finds that its existing configuration BPDU 1 0 1 Port B2 is superior to the received configuration BPDU and discards the received one Port B1 0 0 0 Port A1 Port B2 1 0 1 Port B2 Device...

Страница 62: ...ting configuration BPDU 0 10 2 Port C2 and updates its configuration BPDU Port C1 receives a periodic configuration BPDU 0 0 0 Port A2 from Port A2 finds that it is the same as the existing configuration BPDU and discards the received one Port C1 0 0 0 Port A2 Port C2 0 5 1 Port B2 Device C finds that the root path cost of Port C1 10 root path cost of the received configuration BPDU 0 plus path co...

Страница 63: ...newly calculated configuration BPDU cannot be propagated throughout the network immediately so the old root ports and designated ports that have not detected the topology change continue forwarding data along the old path If the new root ports and designated ports begin to forward data as soon as they are elected a temporary loop might occur STP timers The most important timing parameters in STP c...

Страница 64: ...brid ports according to the status of permitted VLANs except VLAN 1 MSTP STP RSTP and PVST limitations STP does not support rapid state transition of ports A newly elected port must wait twice the forward delay time before it transits to the forwarding state even if it connects to a point to point link or is an edge port Although RSTP supports rapid network convergence it has the same drawback as ...

Страница 65: ...ncepts Figure 16 shows a switched network that comprises four MST regions each MST region comprising four MSTP devices Figure 17 shows the networking topology of MST region 3 Figure 16 Basic concepts in MSTP MST region 1 MST region 2 MST region 3 MST region 4 VLAN 1 MSTI 1 VLAN 2 MSTI 2 Other VLANs MSTI 0 VLAN 1 MSTI 1 VLAN 2 MSTI 2 Other VLANs MSTI 0 VLAN 1 MSTI 1 VLAN 2 MSTI 2 Other VLANs MSTI 0...

Страница 66: ...Each spanning tree is referred to as a multiple spanning tree instance MSTI In Figure 17 MST region 3 comprises three MSTIs MSTI 1 MSTI 2 and MSTI 0 VLAN to instance mapping table As an attribute of an MST region the VLAN to instance mapping table describes the mapping relationships between VLANs and MSTIs In Figure 17 the VLAN to instance mapping table of MST region 3 is VLAN 1 to MSTI 1 VLAN 2 a...

Страница 67: ...nt regional roots For example in MST region 3 in Figure 17 the regional root of MSTI 1 is Device B the regional root of MSTI 2 is Device C and the regional root of MSTI 0 also known as the IST is Device A Common root bridge The common root bridge is the root bridge of the CIST In Figure 16 for example the common root bridge is a device in MST region 1 Port roles A port can play different roles in ...

Страница 68: ...region or to an STP RSTP running device In MSTP calculation a boundary port s role on an MSTI is consistent with its role on the CIST But that is not true with master ports A master port on MSTIs is a root port on the CIST Port states In MSTP a port can be in one of the following states Forwarding The port receives and sends BPDUs obtains MAC addresses and forwards user traffic Learning The port r...

Страница 69: ... different MSTIs for different VLANs based on the VLAN to instance mappings For each spanning tree MSTP performs a separate calculation process similar to spanning tree calculation in STP For more information see Calculation process of the STP algorithm In MSTP a VLAN packet is forwarded along the following paths Within an MST region the packet is forwarded along the corresponding MSTI Between two...

Страница 70: ...ly after the port is removed from the aggregation group After you enable a spanning tree protocol on a Layer 2 aggregate interface the system performs spanning tree calculation on the Layer 2 aggregate interface but not on the aggregation member ports The spanning tree protocol enable state and forwarding state of each selected member port is consistent with those of the corresponding Layer 2 aggr...

Страница 71: ... Configuring the device priority Optional Configuring the network diameter of a switched network Optional Configuring spanning tree timers Optional Configuring the timeout factor Optional Configuring the maximum port rate Optional Configuring edge ports Optional Configuring the port link type Optional Enabling outputting port state transition information Optional Enabling the spanning tree feature...

Страница 72: ...ing the maximum port rate Optional Configuring edge ports Optional Configuring the port link type Optional Enabling outputting port state transition information Optional Enabling the spanning tree feature Required Configuring the leaf nodes Setting the spanning tree mode Required Configure the device to operate in PVST mode Configuring the device priority Optional Configuring the timeout factor Op...

Страница 73: ... Configuring the port link type Optional Configuring the mode a port uses to recognize send MSTP packets Optional Enabling outputting port state transition information Optional Enabling the spanning tree feature Required Configuri ng the leaf nodes Setting the spanning tree mode Optional By default the device operates in MSTP mode Configuring an MST region Required Configuring the device priority ...

Страница 74: ...panning tree for each VLAN The number of VLANs that PVST can maintain instances for depends on the switch model Suppose the number is n which is 16 on the HPE 3100 v2 When you configure PVST on devices of different models in a network to avoid network failures make sure that the number of VLANs for which PVST maintains instances does not exceed the lowest n The MSTP mode is compatible with the RST...

Страница 75: ...Step Command Remarks 1 Enter system view system view N A 2 Enter MST region view stp region configuration N A 3 Configure the MST region name region name name Optional The MST region name is the MAC address by default 4 Configure the VLAN to instance mapping table instance instance id vlan vlan list vlan mapping modulo modulo Optional Use either command All VLANs in an MST region are mapped to the...

Страница 76: ...settings Once you specify a device as the root bridge or a secondary root bridge you cannot change its priority You can configure the current device as the root bridge by setting the device priority to 0 For the device priority configuration see Configuring the device priority Configuring the current device as the root bridge of a specific spanning tree To configure the current device as the root ...

Страница 77: ...an list priority priority In MSTP mode stp instance instance id priority priority Use one of the commands The default setting is 32768 Configuring the maximum hops of an MST region By setting the maximum hops of an MST region you can restrict the region size The maximum hops configured on the regional root bridge will be used as the maximum hops of the MST region Configuration BPDUs sent by the re...

Страница 78: ...ee calculation Forward delay It is the delay time for port state transition To prevent temporary loops on a network the spanning tree sets an intermediate port state the learning state before it transitions from the discarding state to the forwarding state and requires that the port transitions its state after a forward delay timer to make sure that the state transition of the local port keeps syn...

Страница 79: ...k resources Hewlett Packard Enterprise recommends you to use the default setting If the max age timer is too short the device will frequently begin spanning tree calculation and might mistake network congestion as a link failure If the max age timer is too long the device might fail to quickly detect link failures and begin spanning tree calculations reducing the auto sensing capability of the net...

Страница 80: ...ture The higher the maximum port rate is the more BPDUs will be sent within each hello time and the more system resources will be used By setting an appropriate maximum port rate you can limit the rate at which the port sends BPDUs and prevent spanning tree protocols from using excessive network resources when the network becomes unstable Hewlett Packard Enterprise recommends you to use the defaul...

Страница 81: ...rts are non edge ports by default Configuring path costs of ports Path cost is a parameter related to the rate of a port On a spanning tree device a port can have different path costs in different MSTIs Setting appropriate path costs allows VLAN traffic flows to be forwarded along different physical links achieving VLAN based load balancing You can have the device automatically calculate the defau...

Страница 82: ... containing 3 Selected ports 66 666 160 Aggregate interface containing 4 Selected ports 50 000 140 1000 Mbps Single port 4 20 000 20 Aggregate interface containing 2 Selected ports 10 000 18 Aggregate interface containing 3 Selected ports 6666 16 Aggregate interface containing 4 Selected ports 5000 14 10 Gbps Single port 2 2000 2 Aggregate interface containing 2 Selected ports 1000 1 Aggregate int...

Страница 83: ...d 1998 dot1t legacy Optional legacy by default Configuring path costs of ports When the path cost of a port changes the system re calculates the role of the port and initiates a state transition To configure the path cost of ports Step Command Remarks 1 Enter system view system view N A 2 Enter interface view or port group view Enter Layer 2 Ethernet interface view or Layer 2 aggregate interface v...

Страница 84: ... group of ports Step Command Remarks 1 Enter system view system view N A 2 Enter interface view or port group view Enter Layer 2 Ethernet interface view or Layer 2 aggregate interface view interface interface type interface number Enter port group view port group manual port group name Use one of the commands 3 Configure the port priority In STP RSTP mode stp port priority priority In PVST mode st...

Страница 85: ...d determines the format of packets that it will send based on the recognized format You can configure the MSTP packet format on a port When operating in MSTP mode after the configuration the port sends and receives only MSTP packets of the format that you have configured to communicate with devices that send packets of the same format MSTP provides MSTP packet format incompatibility guard In MSTP ...

Страница 86: ...ort log instance 0 In PVST mode stp port log vlan vlan list In MSTP mode stp port log instance instance id all Use one of the commands Enabled by default Enabling the spanning tree feature You must enable the spanning tree feature for the device before any other spanning tree related configurations can take effect Configuration restrictions and guidelines You can disable the spanning tree feature ...

Страница 87: ...nning tree feature is enabled for all ports Enabling the spanning tree feature in PVST mode In PVST mode make sure that the spanning tree feature is enabled globally and on the desired VLANs and ports To enable the spanning tree feature in PVST mode Step Command Remarks 1 Enter system view system view N A 2 Globally enable the spanning tree feature stp enable By default the spanning tree feature i...

Страница 88: ...llowing methods for performing mCheck produce the same result Performing mCheck globally Step Command 1 Enter system view system view 2 Perform mCheck stp mcheck Performing mCheck in interface view Step Command 1 Enter system view system view 2 Enter Layer 2 Ethernet interface view or Layer 2 aggregate interface view interface interface type interface number 3 Perform mCheck stp mcheck NOTE An mCh...

Страница 89: ...d ports first and then globally To prevent loops do not enable Digest Snooping on MST region edge ports Hewlett Packard Enterprise recommends you to enable Digest Snooping first and then the spanning tree feature To avoid causing traffic interruption do not configure Digest Snooping when the network is already working well Configuration procedure You can enable Digest Snooping only on the HPE devi...

Страница 90: ...thernet1 0 1 stp config digest snooping DeviceB Ethernet1 0 1 quit DeviceB stp config digest snooping Configuring No Agreement Check In RSTP and MSTP the following types of messages are used for rapid state transition on designated ports Proposal Sent by designated ports to request rapid transition Agreement Used to acknowledge rapid transition requests Both RSTP and MSTP devices can perform rapid...

Страница 91: ...of the upstream device fails to transit rapidly and can only change to the forwarding state after a period twice the Forward Delay You can enable the No Agreement Check feature on the downstream device s port to enable the designated port of the upstream device to transit its state rapidly Configuration prerequisites Before you configure the No Agreement Check function complete the following tasks...

Страница 92: ...implementation Both devices are in the same region The third party device Device B is the regional root bridge and Device A is the downstream device Figure 22 Network diagram Configuration procedure Enable No Agreement Check on Ethernet 1 0 1 of Device A DeviceA system view DeviceA interface ethernet 1 0 1 DeviceA Ethernet1 0 1 stp no agreement check Configuring TC snooping Figure 23 shows a topol...

Страница 93: ... Layer 3 IP Services Configuration Guide Configuration restrictions and guidelines TC snooping and STP are mutually exclusive You must globally disable the spanning tree feature before enable TC snooping TC snooping does not take effect on the ports on which BPDU tunneling is enabled for spanning tree protocols For more information about BPDU tunneling see Configuring BPDU tunneling TC snooping do...

Страница 94: ...spanning tree protocol The device will reactivate the closed ports after a detection interval For more information about this detection interval see Fundamentals Configuration Guide Configuration restrictions and guidelines Configure BPDU guard on a device with edge ports configured You must enable BPDU guard on a port that directly connects to a user terminal rather than another device or shared ...

Страница 95: ... a higher priority Another device will supersede the current legal root bridge causing an undesired change of the network topology The traffic that should go over high speed links is switched to low speed links resulting in network congestion To prevent this situation MSTP provides the root guard function If the root guard function is enabled on a port of a root bridge this port plays the role of ...

Страница 96: ...w or Layer 2 aggregate interface view interface interface type interface number Enter port group view port group manual port group name Use either command 3 Enable the loop guard function for the ports stp loop protection Disabled by default NOTE Do not enable loop guard on a port that connects user terminals Otherwise the port will stay in the discarding state in all MSTIs because it cannot recei...

Страница 97: ...rop on an Ethernet interface Step Command Remarks 1 Enter system view system view N A 2 Enter Layer 2 Ethernet interface view interface interface type interface number N A 3 Enable BPDU drop on the current interface bpdu drop any Disabled by default NOTE Because a port with BPDU drop enabled also drops the received 802 1X packets do not enable BPDU drop and 802 1X on a port at the same time For mo...

Страница 98: ...mand Remarks Display information about ports blocked by spanning tree protection functions display stp abnormal port begin exclude include regular expression Available in any view Display BPDU statistics on ports display stp bpdu statistics interface interface type interface number instance instance id begin exclude include regular expression Available in any view Display information about ports s...

Страница 99: ...ayer Configure MSTP so that packets of different VLANs are forwarded along different spanning trees Packets of VLAN 10 are forwarded along MSTI 1 those of VLAN 30 are forwarded along MSTI 3 those of VLAN 40 are forwarded along MSTI 4 and those of VLAN 20 are forwarded along MSTI 0 VLAN 10 and VLAN 30 are terminated on the distribution layer devices and VLAN 40 is terminated on the access layer dev...

Страница 100: ...respectively and configure the revision level of the MST region as 0 DeviceB system view DeviceB stp region configuration DeviceB mst region region name example DeviceB mst region instance 1 vlan 10 DeviceB mst region instance 3 vlan 30 DeviceB mst region instance 4 vlan 40 DeviceB mst region revision level 0 Activate MST region configuration DeviceB mst region active region configuration DeviceB ...

Страница 101: ...igurations In this example suppose that Device B has the lowest root bridge ID As a result Device B is elected as the root bridge in MSTI 0 You can use the display stp brief command to display brief spanning tree information on each device after the network is stable Display brief spanning tree information on Device A DeviceA display stp brief MSTID Port Role STP State Protection 0 Ethernet1 0 1 A...

Страница 102: ...1 0 3 ALTE DISCARDING NONE 3 Ethernet1 0 1 ROOT FORWARDING NONE 3 Ethernet1 0 2 ALTE DISCARDING NONE 4 Ethernet1 0 3 ROOT FORWARDING NONE Based on the output you can draw the MSTI mapped to each VLAN as shown in Figure 25 Figure 25 MSTIs mapped to different VLANs PVST configuration example Network requirements As shown in Figure 26 Device A and Device B work at the distribution layer Device C and ...

Страница 103: ...ated VLANs 2 Configure Device A Set the spanning tree mode to PVST DeviceA system view DeviceA stp mode pvst Specify the device as the root bridge of VLAN 10 and VLAN 20 DeviceA stp vlan 10 20 root primary Enable the spanning tree feature globally and for VLANs 10 20 and 30 DeviceA stp enable DeviceA stp vlan 10 20 30 enable 3 Configure Device B Set the spanning tree mode to PVST DeviceB system vi...

Страница 104: ...0 3 DESI FORWARDING NONE 30 Ethernet1 0 2 DESI FORWARDING NONE 30 Ethernet1 0 3 ROOT FORWARDING NONE Display brief spanning tree information on Device B DeviceB display stp brief VLAN Port Role STP State Protection 10 Ethernet1 0 2 DESI FORWARDING NONE 10 Ethernet1 0 3 ROOT FORWARDING NONE 20 Ethernet1 0 1 DESI FORWARDING NONE 20 Ethernet1 0 2 DESI FORWARDING NONE 20 Ethernet1 0 3 ROOT FORWARDING ...

Страница 105: ...rnet1 0 1 ROOT FORWARDING NONE 30 Ethernet1 0 2 ALTE DISCARDING NONE 40 Ethernet1 0 3 ROOT FORWARDING NONE Based on the output you can draw the spanning tree mapped to each VLAN as shown in Figure 27 Figure 27 Spanning trees mapped to different VLANs ...

Страница 106: ... packet is from the user network or the service provider network and must deliver the packet to the CPU for processing In this case the Layer 2 protocol calculation in User A s network is mixed with that in the service provider network and the user network cannot implement independent Layer 2 protocol calculation Figure 28 BPDU tunneling application scenario BPDU tunneling addresses this problem W...

Страница 107: ...culate its independent spanning tree BPDU tunneling allows each network to calculate an independent spanning tree with STP BPDU tunneling delivers the following benefits BPDUs can be transparently transmitted BPDUs of one customer network can be broadcast in a specific VLAN across the service provider network allowing that customer s geographically dispersed networks to implement consistent spanni...

Страница 108: ...nable the protocol in the customer network Assign the port on which you want to enable BPDU tunneling on the PE device and the connected port on the CE device to the same VLAN Configure ports that connect network devices in the service provider network as trunk ports that allow packets of any VLAN to pass through Configuration restrictions and guidelines Settings made in Layer 2 Ethernet interface...

Страница 109: ...lt Configuring destination multicast MAC address for BPDUs By default the destination multicast MAC address for BPDUs is 0x010F E200 0003 You can change it to 0x0100 0CCD CDD0 0x0100 0CCD CDD1 or 0x0100 0CCD CDD2 To configure destination multicast MAC address for BPDUs Step Command Remarks 1 Enter system view system view N A 2 Configure the destination multicast MAC address for BPDUs bpdu tunnel t...

Страница 110: ...0 0CCD CDD0 PE1 system view PE1 bpdu tunnel tunnel dmac 0100 0ccd cdd0 Create VLAN 2 and assign Ethernet 1 0 1 to VLAN 2 PE1 vlan 2 PE1 vlan2 quit PE1 interface ethernet 1 0 1 PE1 Ethernet1 0 1 port access vlan 2 Disable STP on Ethernet 1 0 1 and then enable BPDU tunneling for STP on it PE1 Ethernet1 0 1 undo stp enable PE1 Ethernet1 0 1 bpdu tunnel dot1q stp 2 Configure PE 2 Configure the destina...

Страница 111: ... diagram Configuration procedure 1 Configure PE 1 Configure the destination multicast MAC address for BPDUs as 0x0100 0CCD CDD0 PE1 system view PE1 bpdu tunnel tunnel dmac 0100 0ccd cdd0 Configure Ethernet 1 0 1 as a trunk port and assign it to all VLANs PE1 interface ethernet 1 0 1 PE1 Ethernet1 0 1 port link type trunk PE1 Ethernet1 0 1 port trunk permit vlan all Disable STP on Ethernet 1 0 1 an...

Страница 112: ...103 Disable STP on Ethernet 1 0 2 and then enable BPDU tunneling for STP and PVST on it PE2 Ethernet1 0 2 undo stp enable PE2 Ethernet1 0 2 bpdu tunnel dot1q stp PE2 Ethernet1 0 2 bpdu tunnel dot1q pvst ...

Страница 113: ... and improves network performance 2 Improving LAN security By assigning user groups to different VLANs you can isolate them at Layer 2 To enable communication between VLANs routers or Layer 3 switches are required 3 Creating flexible virtual workgroups Because users from the same workgroup can be assigned to the same VLAN regardless of their physical locations network construction and maintenance ...

Страница 114: ...out commands used to modify TPID values see Layer 2 LAN Switching Command Reference Priority The 3 bit priority field indicates the 802 1p priority of the frame CFI The 1 bit CFI field indicates whether the MAC addresses are encapsulated in standard format when packets are transmitted across different media A value of 0 indicates that MAC addresses are encapsulated in standard format A value of 1 ...

Страница 115: ...rol VLAN for a smart link group control VLAN for an RRPP domain remote probe VLAN for remote port mirroring remove the configuration from the VLAN first and execute the undo vlan command Configuration procedure To configure basic VLAN settings Step Command Remarks 1 Enter system view system view N A 2 Create a VLAN and enter its view or create VLANs in batch vlan vlan id1 to vlan id2 all Optional ...

Страница 116: ...is the VLAN interface name For example Vlan interface1 Interface 5 Set the MTU for the VLAN interface mtu size Optional By default the MTU is 1500 bytes 6 Restore the default settings for the VLAN interface default Optional 7 Cancel the action of manually shutting down the VLAN interface undo shutdown Optional By default a VLAN interface is not manually shut down The VLAN interface is up if one or...

Страница 117: ...le VLANs You can configure a PVID for the port You can use a nonexistent VLAN as the PVID for a hybrid or trunk port but not for an access port After you use the undo vlan command to remove the VLAN that an access port resides in the PVID of the port changes to VLAN 1 The removal of the VLAN specified as the PVID of a trunk or hybrid port however does not affect the PVID setting on the port When y...

Страница 118: ...sent with the VLAN tag removed or intact depending on your configuration via the port hybrid vlan command This is true of the PVID Assigning an access port to a VLAN You can assign an access port to a VLAN in VLAN view interface view including Layer 2 Ethernet interface view and Layer 2 aggregate interface view or port group view To assign one or multiple access ports to a VLAN in VLAN view Step C...

Страница 119: ...ps applying the configuration to aggregation member ports If the system fails to apply the configuration to an aggregation member port it skips the port and moves to the next member port 3 Configure the link type of the ports as access port link type access Optional By default all ports are access ports 4 Assign the access ports to a VLAN port access vlan vlan id Optional By default all access por...

Страница 120: ...d moves to the next member port 3 Configure the link type of the ports as trunk port link type trunk By default all ports are access ports To change the link type of a port from trunk to hybrid or vice versa you must set the link type to access first 4 Assign the trunk ports to the specified VLANs port trunk permit vlan vlan list all By default a trunk port carries only VLAN 1 5 Configure the PVID...

Страница 121: ...pe to access first 4 Assign the hybrid ports to the specified VLANs port hybrid vlan vlan list tagged untagged By default a hybrid port allows only packets of VLAN 1 to pass through untagged 5 Configure the PVID of the hybrid ports port hybrid pvid vlan vlan id Optional By default the PVID is VLAN 1 NOTE Before you assign a hybrid port to a VLAN create the VLAN After configuring the PVID for a hyb...

Страница 122: ...to Device B DeviceA interface ethernet 1 0 3 DeviceA Ethernet1 0 3 port link type trunk DeviceA Ethernet1 0 3 port trunk permit vlan 100 200 Please wait Done 2 Configure Device B as you configure Device A Verifying the configurations 1 Determine whether the configuration is successful by displaying relevant VLAN information Display information about VLANs 100 and 200 on Device A DeviceA Ethernet1 ...

Страница 123: ...protocol and forwards the frame c If no VLAN is available the device tags the frame with the PVID of the receiving port and forwards the frame When the port receives a tagged frame the port forwards the frame if the VLAN ID of the frame is permitted by the port or otherwise drops the frame Dynamic MAC based VLAN You can use dynamic MAC based VLAN with access authentication such as 802 1X authentic...

Страница 124: ...ermits the packets from VLAN 1 to pass through 6 Enable the MAC based VLAN feature mac vlan enable Disabled by default To configure dynamic MAC based VLAN Step Command Remarks 1 Enter system view system view N A 2 Enter interface view or port group view Enter Layer 2 Ethernet interface view interface interface type interface number Enter port group view port group manual port group name Use either...

Страница 125: ...Create VLANs 100 and 200 Configure the uplink ports of Device A and Device C as trunk ports and assign them to VLANs 100 and 200 Configure the downlink ports of Device B as trunk ports and assign them to VLANs 100 and 200 Assign the uplink ports of Device B to VLANs 100 and 200 Associate the MAC address of Laptop 1 with VLAN 100 and associate the MAC address of Laptop 2 with VLAN 200 Configuration...

Страница 126: ...1 0 2 quit 2 Configure Device B Create VLANs 100 and 200 Assign Ethernet 1 0 13 to VLAN 100 and assign Ethernet 1 0 14 to VLAN 200 DeviceB system view DeviceB vlan 100 DeviceB vlan100 port ethernet 1 0 13 DeviceB vlan100 quit DeviceB vlan 200 DeviceB vlan200 port ethernet 1 0 14 DeviceB vlan200 quit Configure Ethernet 1 0 3 and Ethernet 1 0 4 as trunk ports and assign them to VLANs 100 and 200 Dev...

Страница 127: ...on hybrid ports and a protocol template applies only to untagged packets When an untagged packet arrives a protocol based VLAN assignment enabled hybrid port processes the packet by using the following workflow If the protocol type and encapsulation format in the packet matches a protocol template the packet is tagged with the VLAN tag specific to the protocol template If no protocol template is m...

Страница 128: ...2 aggregate interface view applies to the aggregate interface and its aggregation member ports If the system fails to apply the configuration to the aggregate interface it stops applying the configuration to aggregation member ports If the system fails to apply the configuration to an aggregation member port it skips the port and moves to the next member port 6 Configure the port link type as hybr...

Страница 129: ...evice vlan100 quit Create VLAN 200 and assign port Ethernet 1 0 12 to VLAN 200 Device vlan 200 Device vlan200 description protocol VLAN for IPv6 Device vlan200 port ethernet 1 0 12 Create an IPv6 protocol template in the view of VLAN 200 and create an IPv4 protocol template in the view of VLAN 100 Device vlan200 protocol vlan 1 ipv6 Device vlan200 quit Device vlan 100 Device vlan100 protocol vlan ...

Страница 130: ...st B and IPv4 Server to be on the same IP subnet 192 168 100 0 24 for example and configure IPv6 Host A IPv6 Host B and IPv6 Server to be on the same IP subnet 2001 1 64 for example Verifying the configurations 1 The hosts and the server in VLAN 100 can ping one another successfully The hosts and the server in VLAN 200 can ping one another successfully The hosts or server in VLAN 100 cannot ping t...

Страница 131: ...ay MAC address to VLAN entries display mac vlan all dynamic mac address mac address static vlan vlan id begin exclude include regular expression Available in any view Display all interfaces with MAC based VLAN enabled display mac vlan interface begin exclude include regular expression Available in any view Display protocol information and protocol indexes of the specified VLANs available only on t...

Страница 132: ...s whether a received packet is a voice packet by evaluating its source MAC address A packet whose source MAC address complies with any of the Organizationally Unique Identifier OUI addresses of the voice devices is regarded as voice traffic You can remove the default OUI address of a device manually and then add new ones manually You can configure the OUI addresses of a device in advance or use th...

Страница 133: ...he voice VLAN configuration is based on the received LLDP MED TLVs or CDP packets the IP phone will send out packets tagged with the advertised voice VLAN ID The voice packets will be forwarded in the voice VLAN For more information about configuring LLDP or CDP see Configuring LLDP to advertise a specific voice VLAN For more information about LLDP and CDP compatibility see Configuring LLDP If the...

Страница 134: ...in series Connecting the IP phone to the device As shown in Figure 40 the IP phone is connected to the device without the presence of the host Use this connection method when the IP phone sends out untagged voice packets In this scenario you must configure the voice VLAN as the PVID of the port and configure the port to forward the packets from the PVID Figure 40 Connecting the IP phone to the dev...

Страница 135: ...in the packets against the device s OUI addresses If the match succeeds the system issues ACL rules to set the packet precedence To remove the port from the voice VLAN you must manually remove it Cooperation of voice VLAN assignment modes and IP phones Some IP phones send out VLAN tagged packets and others send out only untagged packets For correct packet process ports of different link types must...

Страница 136: ...led ports operate in the following modes Normal mode The port receives voice VLAN tagged packets and forwards them in the voice VLAN without examining their MAC addresses If the PVID of the port is the voice VLAN and the port operates in manual VLAN assignment mode the port forwards all received untagged packets in the voice VLAN In normal mode voice VLANs are vulnerable to traffic attacks Malicio...

Страница 137: ...n the voice VLAN Packets that carry other tags Forwarded or dropped depending on whether the port allows packets of these VLANs to pass through Configuration prerequisites Before you configure a voice VLAN complete the following tasks Create a VLAN Determine the QoS priority settings for voice VLAN traffic Determine the voice VLAN assignment mode Configuring QoS priority settings for voice traffic...

Страница 138: ...ee Configuring protocol based VLANs available only on the HPE 3100 v2 EI Do not configure automatic voice VLAN assignment together with MSTP because the former is mainly configured on the access side With MSTP enabled if a port is blocked in the MST instance MSTI of the target voice VLAN the port drops the received packets instead of delivering them to the CPU As a result the receiving port will n...

Страница 139: ...e voice vlan vlan id enable By default the voice VLAN feature is disabled Configuring a port to operate in manual voice VLAN assignment mode Configuration restrictions and guidelines You can configure different voice VLANs on different ports at the same time However you can configure one port with only one voice VLAN and this voice VLAN must be a static VLAN that already exists on the device Do no...

Страница 140: ...Enabling LLDP to automatically discover IP phones In a traditional voice VLAN network the switch maps the source MAC addresses of IP phones to a limited number of OUI addresses to allow them to access the network This method restricts the types of IP phones on the network if the IP phones with the source MAC addresses match the same OUI address are categorized as a type To break the restriction yo...

Страница 141: ...onfiguring LLDP This feature allows you to specify the voice VLAN information that LLDP will advertise to IP phones through network policy TLVs If you enable CDP compatibility on the device the device advertise the voice VLAN information to the IP phones through CDP packets The LLDP packets that the device send to IP phones carry the priority information The CDP packets that the device send to IP ...

Страница 142: ...te IP phones As shown in Figure 41 configure 802 1X on the device to authenticate the host and the IP phone which must support 802 1X Configure the authentication server to assign an untagged VLAN to the host and assign a tagged VLAN to the IP phone After the host and the IP phone pass the authentication the port connected to the IP phone is added to the VLAN assigned to the IP phone as a tagged m...

Страница 143: ... 1 0 1 and Ethernet 1 0 2 to operate in automatic voice VLAN assignment mode Add MAC addresses of IP phones A and B to the device for voice packet identification The mask of the two MAC addresses is FFFF FF00 0000 Figure 42 Network diagram Configuration procedure 1 Configure voice VLANs Create VLAN 2 and VLAN 3 DeviceA system view DeviceA vlan 2 to 3 Please wait Done Set the voice VLAN aging timer...

Страница 144: ...lan mode auto Configure VLAN 3 as the voice VLAN for Ethernet 1 0 1 DeviceA Ethernet1 0 2 voice vlan 3 enable Verifying the configurations Display the OUI addresses and their masks and descriptions DeviceA display voice vlan oui Oui Address Mask Description 0001 e300 0000 ffff ff00 0000 Siemens phone 0003 6b00 0000 ffff ff00 0000 Cisco phone 0004 0d00 0000 ffff ff00 0000 Avaya phone 0011 1100 0000...

Страница 145: ...Add a MAC address 0011 2200 0000 with the mask FFFF FF00 0000 DeviceA voice vlan mac address 0011 2200 0000 mask ffff ff00 0000 description test Create VLAN 2 DeviceA vlan 2 DeviceA vlan2 quit Configure Ethernet 1 0 1 to operate in manual voice VLAN assignment mode DeviceA interface ethernet 1 0 1 DeviceA Ethernet1 0 1 undo voice vlan mode auto Configure Ethernet 1 0 1 as a hybrid port DeviceA Eth...

Страница 146: ...00 0000 ffff ff00 0000 Pingtel phone 0060 b900 0000 ffff ff00 0000 Philips NEC phone 00e0 7500 0000 ffff ff00 0000 Polycom phone 00e0 bb00 0000 ffff ff00 0000 3com phone Display the voice VLAN state DeviceA display voice vlan state Maximum of Voice VLANs 8 Current Voice VLANs 1 Voice VLAN security mode Security Voice VLAN aging time 1440 minutes Voice VLAN enabled port and its mode PORT VLAN MODE ...

Страница 147: ... registers and deregisters its attribute values with other GARP participants by sending and withdrawing declarations and registers and deregisters the attribute values of other participants according to the declarations and withdrawals that it has received Figure 44 How GARP works For example a GVRP enabled port registers and deregisters VLAN in the following cases When the port receives a VLAN at...

Страница 148: ...a JoinIn message for the attribute value If the GARP participant does not receive any declaration for the attribute value when the Join timer expires it re declares the attribute value Because all attributes of a GARP participant share the same Join timer you must set the Join timer long enough so that all attributes can be sent out in one declaration Leave timer A GARP participant starts a Leave ...

Страница 149: ...ue N A Attribute length Length of an attribute inclusive of the attribute length field 2 to 255 in bytes Attribute event Event that the attribute describes 0x00 LeaveAll event 0x01 JoinEmpty event 0x02 JoinIn event 0x03 LeaveEmpty event 0x04 LeaveIn event 0x05 Empty event Attribute value Attribute value VLAN ID for GVRP If the value of the attribute event field is 0x00 LeaveAll event the attribute...

Страница 150: ...er or withdraw dynamic VLAN information but allows the port to send declarations for static VLANs A trunk port in this mode carries only static VLANs even if it has been assigned to all VLANs Forbidden mode Disables the trunk port to register or withdraw dynamic VLAN information and allows the port to send declarations only for VLAN 1 A trunk port in this mode carries only VLAN 1 even if it has be...

Страница 151: ...port Step Command Remarks 1 Enter system view system view N A 2 Enable GVRP globally gvrp Globally disabled by default 3 Enter Ethernet interface view Layer 2 aggregate interface view or port group view Enter Ethernet interface view or Layer 2 aggregate interface view interface interface type interface number Enter port group view port group manual port group name Use either command 4 Configure th...

Страница 152: ... set a value beyond the value range for a timer you can change the value range by tuning the value of another related timer If you want to restore the default settings of the timers restore the Hold timer first followed by the Join Leave and LeaveAll timers Table 19 Dependencies of the GARP timers Timer Lower limit Upper limit Hold 10 centiseconds No greater than half of the Join timer Join No les...

Страница 153: ...gin exclude include regular expression Available in any view Clear the GARP statistics on ports reset garp statistics interface interface list Available in user view GVRP configuration examples GVRP normal registration mode configuration example Network requirements As shown in Figure 46 Device A and Device B are connected through their ports Ethernet 1 0 1 Enable GVRP and configure the normal reg...

Страница 154: ...ording to the output information about VLAN 1 static VLAN information of VLAN 2 on the local device and dynamic VLAN information of VLAN 3 on Device B are all registered through GVRP Display the local VLAN information that GVRP maintains on port Ethernet 1 0 1 of Device B DeviceB display gvrp local vlan interface ethernet 1 0 1 Following VLANs exist in GVRP local database 1 default 2 3 According t...

Страница 155: ...viceB Ethernet1 0 1 gvrp registration fixed DeviceB Ethernet1 0 1 quit Create VLAN 3 a static VLAN DeviceB vlan 3 DeviceB vlan3 quit 3 Verify the configuration Use the display gvrp local vlan command to display the local VLAN information that GVRP maintains on ports For example Display the local VLAN information that GVRP maintains on port Ethernet 1 0 1 of Device A DeviceA display gvrp local vlan...

Страница 156: ...t trunk permit vlan all Enable GVRP on Ethernet 1 0 1 and set the GVRP registration mode to forbidden on the port DeviceA Ethernet1 0 1 gvrp DeviceA Ethernet1 0 1 gvrp registration forbidden DeviceA Ethernet1 0 1 quit Create VLAN 2 a static VLAN DeviceA vlan 2 DeviceA vlan2 quit 2 Configure Device B Enable GVRP globally DeviceB system view DeviceB gvrp Configure port Ethernet 1 0 1 as a trunk port...

Страница 157: ...ation about VLAN 1 is registered through GVRP but static VLAN information of VLAN 2 on the local device and dynamic VLAN information of VLAN 3 on Device B are not Display the local VLAN information that GVRP maintains on port Ethernet 1 0 1 of Device B DeviceB display gvrp local vlan interface ethernet 1 0 1 Following VLANs exist in GVRP local database 1 default According to the output information...

Страница 158: ... have multiple CVLANs Background and benefits The IEEE 802 1Q VLAN tag uses 12 bits for VLAN IDs A device supports a maximum of 4094 VLANs This is far from enough for isolating users in actual networks especially in metropolitan area networks MANs By tagging tagged frames QinQ expands the available VLAN space from 4094 to 4094 4094 QinQ delivers the following benefits Releases the stress on the SV...

Страница 159: ... and traffic from different customers can be identified separately The double tagged Ethernet frame is then transmitted over the service provider network and arrives at the other PE The PE removes the SVLAN of the frame before sending it to the target customer edge device CE QinQ frame structure A QinQ frame is transmitted double tagged over the service provider network As shown in Figure 50 the i...

Страница 160: ...tag frames from different CVLANs with different SVLAN tags Besides being able to separate the service provider network from the customer networks selective QinQ provides abundant service features and enables more flexible networking Modifying the TPID in a VLAN tag A VLAN tag uses the tag protocol identifier TPID field to identify the protocol type of the tag The value of this field as defined in ...

Страница 161: ... 0xFFFD 0xFFFE 0xFFFF Protocols and standards IEEE 802 1Q IEEE standard for local and metropolitan area networks Virtual Bridged Local Area Networks QinQ configuration task list When you configure QinQ follow these guidelines QinQ requires configurations only on the service provider network QinQ configurations made in Ethernet interface view take effect on the current interface only Those made in ...

Страница 162: ...lows adding different outer VLAN tags based on different inner VLAN tags You can configure an outer VLAN tagging policy in one of the following approaches Port based approach QoS policy based approach Configuring an outer VLAN tagging policy in the port based approach Step Command Remarks 1 Enter system view system view N A 2 Enter interface view or port group view Enter Layer 2 Ethernet interface...

Страница 163: ...te a class and enter class view traffic classifier classifier name operator and or By default the operator of a class is AND 3 Specify the inner VLAN IDs of matching frames if match customer vlan id vlan id list N A 4 Return to system view quit N A 5 Create a traffic behavior and enter traffic behavior view traffic behavior behavior name N A 6 Specify an outer VLAN ID nest top most vlan id vlan id...

Страница 164: ...ite 2 are connected through the service provider network and use CVLANs 10 through 70 The two branches of Company B Site 3 and Site 4 are connected through the service provider network and use CVLANs 30 through 90 PE 1 and PE 2 are edge devices on the service provider network and are connected through third party devices with a TPID value of 0x8200 Configure the edge and third party devices to ena...

Страница 165: ... permit vlan 100 200 Set the TPID value in the outer VLAN tag to 0x8200 on the port PE1 Ethernet1 0 2 quit PE1 qinq ethernet type 8200 Configure Ethernet 1 0 3 Configure Ethernet 1 0 3 as a trunk port and assign it to VLAN 200 PE1 interface ethernet 1 0 3 PE1 Ethernet1 0 3 port link type trunk PE1 Ethernet1 0 3 port trunk permit vlan 200 Configure VLAN 200 as the PVID for the port PE1 Ethernet1 0 ...

Страница 166: ...quit 3 On the third party devices between PE 1 and PE 2 configure the port that connects to PE 1 and that connecting to PE 2 to allow tagged frames of VLAN 100 and VLAN 200 to pass through Selective QinQ configuration example in port based approach IMPORTANT This example is available only on the HPE 3100 v2 EI switches Network requirements As shown in Figure 53 The two branches of a company Site 1...

Страница 167: ...ged Configure the port to tag VLAN 10 frames with outer VLAN ID 100 PE1 Ethernet1 0 1 qinq vid 100 PE1 Ethernet1 0 1 vid 100 raw vlan id inbound 10 PE1 Ethernet1 0 1 vid 100 quit Configure the port to tag VLAN 20 frames with outer VLAN ID 200 PE1 Ethernet1 0 1 qinq vid 200 PE1 Ethernet1 0 1 vid 200 raw vlan id inbound 20 PE1 Ethernet1 0 1 vid 200 quit PE1 Ethernet1 0 1 quit Configure Ethernet 1 0 ...

Страница 168: ...k PE2 Ethernet1 0 2 port trunk permit vlan 100 200 Set the TPID in the outer VLAN tags to 0x8200 PE2 Ethernet1 0 2 quit PE2 qinq ethernet type 8200 3 On the third party devices between PE 1 and PE 2 configure the port that connects to PE 1 and that connecting to PE 2 to allow tagged frames of VLAN 100 and VLAN 200 to pass through Selective QinQ configuration example in QoS policy based approach IM...

Страница 169: ...eate class A10 and configure the class to match frames from Site 1 with CVLAN 10 PE1 traffic classifier A10 PE1 classifier A10 if match customer vlan id 10 PE1 classifier A10 quit Create traffic behavior P100 and add the action of inserting outer VLAN tag 100 PE1 traffic behavior P100 PE1 behavior P100 nest top most vlan id 100 PE1 behavior P100 quit Create class A20 and configure the class to mat...

Страница 170: ...00 to pass through untagged PE2 interface ethernet 1 0 1 PE2 Ethernet1 0 1 port link type hybrid PE2 Ethernet1 0 1 port hybrid vlan 100 200 untagged PE2 Ethernet1 0 1 quit Create class A10 and configure the class to match frames from Site 2 with CVLAN 10 PE2 traffic classifier A10 PE2 classifier A10 if match customer vlan id 10 PE2 classifier A10 quit Create traffic behavior P100 and add the actio...

Страница 171: ...trunk port and assign it to VLAN 100 and VLAN 200 PE2 interface ethernet 1 0 2 PE2 Ethernet1 0 2 port link type trunk PE2 Ethernet1 0 2 port trunk permit vlan 100 200 Set the TPID in the outer VLAN tags to 0x8200 PE2 Ethernet1 0 2 quit PE2 qinq ethernet type 8200 3 On the third party devices between PE 1 and PE 2 configure the port that connects to PE 1 and the port that connects to PE 2 to allow ...

Страница 172: ...ith one to one VLAN mapping Application scenario of one to one VLAN mapping Figure 55 shows a typical one to one VLAN mapping application scenario in which each home gateway uses different VLANs to transmit the PC VoD and VoIP services Figure 55 Application scenario of one to one VLAN mapping To meet the service provider s network design perform one to one VLAN mapping on the wiring closet switch ...

Страница 173: ...tomer network Network side port A port connected to or closer to the service provider network Customer side port A port connected to or closer to the customer network Uplink policy A QoS policy that defines VLAN mapping rules for uplink traffic Downlink policy A QoS policy that defines VLAN mapping rules for downlink traffic Customer VLANs CVLANs VLANs assigned for customers Service provider VLANs...

Страница 174: ...raffic mapping each SVLAN ID back to the corresponding CVLAN ID When forwarding a packet out of the port the switch replaces its SVLAN ID with the matching CVLAN ID Figure 58 One to one VLAN mapping implementation with a globally QoS policy Implementing one to one VLAN mapping with port QoS policies Implement one to one VLAN mapping on the customer side port through port QoS policies as shown in F...

Страница 175: ... a global QoS policy Perform one to one VLAN mapping on the wiring closet switch see Figure 55 Perform these tasks to configure one to one VLAN mapping with a global QoS policy Task Remarks Configuring an uplink policy Required Create CVLAN to SVLAN mappings Configuring the customer side port Required Configure settings required for one to one VLAN mapping Configuring the network side port Require...

Страница 176: ...eturn to system view quit 9 Apply the QoS policy to the incoming traffic of all ports qos apply policy policy name global inbound Configuring the customer side port Step Command Remarks 1 Enter system view system view N A 2 Enter Layer 2 Ethernet interface view interface interface type interface number N A 3 Configure the port as a trunk port port link type trunk The default link type of an Ethern...

Страница 177: ...ired for one to one VLAN mapping Configuring the network side port Required Configure VLAN settings required for normal communication Configuration prerequisites Create CVLANs and SVLANs and plan CVLAN to SVLAN mappings Configuring an uplink policy To configure an uplink policy to map each CVLAN to a unique SVLAN Step Command 1 Enter system view system view 2 Configure a class for a CVLAN a Create...

Страница 178: ...r vlan id vlan id 5 Return to system view quit 6 Create a QoS policy and enter QoS policy view qos policy policy name 7 Associate the class with the behavior to map the SVLAN to the CVLAN classifier tcl name behavior behavior name Configuring the customer side port Step Command Remarks 1 Enter system view system view N A 2 Enter Layer 2 Ethernet interface view interface interface type interface nu...

Страница 179: ...he customer side port Required Configures VLAN and other settings required for many to one VLAN mapping Configuring the network side port Required Configures VLAN and other settings required for many to one VLAN mapping Configuration prerequisites Create CVLANs and SVLANs and plan CVLANs to SVLAN mappings Configuring an uplink policy To configure an uplink policy to map a group of CVLANs of the sa...

Страница 180: ... uplink policy to the incoming traffic qos apply policy policy name inbound N A Configuring the network side port Step Command Remarks 1 Enter system view system view N A 2 Enter Ethernet interface view interface interface type interface number N A 3 Configure the port as a trunk port port link type trunk The default link type of an Ethernet port is access 4 Assign the port to CVLANs and SVLANs po...

Страница 181: ...ifier c2 SwitchA classifier c2 if match customer vlan id 2 SwitchA classifier c2 traffic classifier c3 SwitchA classifier c3 if match customer vlan id 3 SwitchA classifier c3 traffic classifier c4 SwitchA classifier c4 if match customer vlan id 4 SwitchA classifier c4 traffic classifier c5 SwitchA classifier c5 if match customer vlan id 5 SwitchA classifier c5 traffic classifier c6 SwitchA classif...

Страница 182: ...2 3 101 201 301 SwitchA Ethernet1 0 1 qinq enable downlink SwitchA Ethernet1 0 1 quit Configure customer side port Ethernet 1 0 2 as a trunk port assign the port to CVLANs 4 through 6 and SVLANs 102 202 and 302 and enable selective QinQ on the port SwitchA interface ethernet 1 0 2 SwitchA Ethernet1 0 2 port link type trunk SwitchA Ethernet1 0 2 port trunk permit vlan 4 5 6 102 202 302 SwitchA Ethe...

Страница 183: ...havior b1 remark service vlan id 101 SwitchA behavior b1 traffic behavior b2 SwitchA behavior b2 remark service vlan id 102 SwitchA behavior b2 quit SwitchA qos policy p1 SwitchA policy p1 classifier c1 behavior b1 mode dot1q tag manipulation SwitchA policy p1 quit SwitchA qos policy p2 SwitchA policy p2 classifier c2 behavior b2 mode dot1q tag manipulation SwitchA policy p2 quit Configure custome...

Страница 184: ... 2 SwitchA Ethernet1 0 2 port link type trunk SwitchA Ethernet1 0 2 port trunk permit vlan 4 5 6 102 SwitchA Ethernet1 0 2 qos apply policy p2 inbound SwitchA Ethernet1 0 2 quit Configure network side port Ethernet 1 0 3 as a trunk port and assign it to all CVLANs and SVLANs SwitchA interface ethernet 1 0 3 SwitchA Ethernet1 0 3 port link type trunk SwitchA Ethernet1 0 3 port trunk permit vlan 1 t...

Страница 185: ... received in LLDPDUs from the LLDP neighbors in a standard MIB For more information about MIBs see Network Management and Monitoring Configuration Guide LLDP enables a network management system to quickly detect and identify Layer 2 network topology changes Basic concepts LLDP frame formats LLDP sends device information in LLDP frames LLDP frames are encapsulated in Ethernet II or SNAP frames Ethe...

Страница 186: ...FCS Frame check sequence a 32 bit CRC value used to determine the validity of the received Ethernet frame LLDPDUs LLDP uses LLDPDUs to exchange information An LLDPDU contains multiple TLVs Each TLV carries a type of device information as shown in Figure 65 Figure 65 LLDPDU encapsulation format An LLDPDU can carry up to 28 types of TLVs Mandatory TLVs include Chassis ID TLV Port ID TLV Time to Live...

Страница 187: ...ice System Description Specifies the description of the sending device System Capabilities Identifies the primary functions of the sending device and the enabled primary functions Management Address Specifies the following elements The management address of the local device The interface number and object identifier OID associated with the address IEEE 802 1 organizationally specific TLVs Table 24...

Страница 188: ...them LLDP MED TLVs LLDP MED TLVs provide multiple advanced applications for voice over IP VoIP such as basic configuration network policy configuration and address and directory management LLDP MED TLVs provide a cost effective and easy to use solution for deploying voice devices in Ethernet LLDP MED TLVs are shown in Table 26 Table 26 LLDP MED TLVs Type Description LLDP MED Capabilities Allows a ...

Страница 189: ...pecified amount of time to initialize LLDP after the LLDP operating mode changes Transmitting LLDP frames An LLDP enabled port operating in TxRx mode or Tx mode sends LLDP frames to its directly connected devices both periodically and when the local configuration changes To prevent LLDP frames from overwhelming the network during times of frequent changes to local device information an interval is...

Страница 190: ...etting an encapsulation format for LLDP frames Optional Configuring CDP compatibility available only on the HPE 3100 v2 EI Optional Configuring LLDP trapping Optional Performing basic LLDP configuration Enabling LLDP To make LLDP take effect on specific ports you must enable LLDP both globally and on these ports To enable LLDP Step Command Remarks 1 Enter system view system view N A 2 Enable LLDP ...

Страница 191: ...p timer reinit delay delay Optional The default setting is 2 seconds Enabling LLDP polling With LLDP polling enabled a device periodically searches for local configuration changes When the device detects a configuration change it sends LLDP frames to inform neighboring devices of the change To enable LLDP polling Step Command Remarks 1 Enter system view system view N A 2 Enter Ethernet interface v...

Страница 192: ...tion with the neighbor To configure a management address to be advertised and its encoding format on a port or group of ports Step Command Remarks 1 Enter system view system view N A 2 Enter Ethernet interface view or port group view Enter Layer 2 Ethernet interface view interface interface type interface number Enter port group view port group manual port group name N A 3 Allow LLDP to advertise ...

Страница 193: ...p Command Remarks 1 Enter system view system view N A 2 Set the TTL multiplier lldp hold multiplier value Optional 4 by default 3 Set the LLDP frame transmission interval lldp timer tx interval interval Optional 30 seconds by default 4 Set the LLDP frame transmission delay lldp timer tx delay delay Optional 2 seconds by default 5 Set the number of LLDP frames sent each time fast LLDP frame transmi...

Страница 194: ... the directly connected device and send CDP packets to the directly connected device The packets that the switch sends to the neighboring CDP device carry the fields in Table 27 Table 27 Fields in CDP packets Field Description Device ID Device ID which is the bridge MAC address of the device Addresses IPv4 address of the interface The port IPv4 address is the primary IP address of the VLAN interfa...

Страница 195: ...t voice VLANs see Configuring a voice VLAN Configuration prerequisites Before you configure CDP compatibility complete the following tasks Globally enable LLDP Enable LLDP on the port connecting to a device supporting CDP Configure the port to operate in TxRx mode Configuration procedure CAUTION The maximum TTL value that CDP allows is 255 seconds To make CDP compatible LLDP work correctly with Ci...

Страница 196: ...default 4 Return to system view quit N A 5 Set the LLDP trap transmission interval lldp timer notification interval interval Optional 5 seconds by default Displaying and maintaining LLDP Task Command Remarks Display the global LLDP information or the information contained in the LLDP TLVs to be sent through a port display lldp local information global interface interface type interface number begi...

Страница 197: ...ween Switch A and Switch B on the NMS Monitor the link between Switch A and the MED device on the NMS Figure 66 Network diagram Configuration procedure 1 Configure Switch A Enable LLDP globally SwitchA system view SwitchA lldp enable Enable LLDP on Ethernet 1 0 1 By default LLDP is enabled on ports SwitchA interface ethernet 1 0 1 SwitchA Ethernet1 0 1 lldp enable Set the LLDP operating mode to Rx...

Страница 198: ...witchA display lldp status Global status of LLDP Enable The current number of LLDP neighbors 2 The current number of CDP neighbors 0 LLDP neighbor information last changed time 0 days 0 hours 4 minutes 40 seconds Transmit interval 30s Hold multiplier 4 Reinit delay 2s Transmit delay 2s Trap interval 5s Fast start times 3 Port 1 Ethernet1 0 1 Port status of LLDP Enable Admin status Rx_Only Trap fla...

Страница 199: ...1 Ethernet1 0 1 Port status of LLDP Enable Admin status Rx_Only Trap flag No Polling interval 0s Number of neighbors 1 Number of MED neighbors 1 Number of CDP neighbors 0 Number of sent optional TLV 0 Number of received unknown TLV 5 Port 2 Ethernet1 0 2 Port status of LLDP Enable Admin status Rx_Only Trap flag No Polling interval 0s Number of neighbors 0 Number of MED neighbors 0 Number of CDP ne...

Страница 200: ...chA Ethernet1 0 2 port link type trunk SwitchA Ethernet1 0 2 voice vlan 2 enable SwitchA Ethernet1 0 2 quit 2 Configure CDP compatible LLDP on Switch A Enable LLDP globally and enable CDP compatibility globally SwitchA lldp enable SwitchA lldp compliance cdp Enable LLDP on Ethernet 1 0 1 By default LLDP is enabled on ports SwitchA interface ethernet 1 0 1 SwitchA Ethernet1 0 1 lldp enable Configur...

Страница 201: ...P neighbor information of port 1 Ethernet1 0 1 CDP neighbor index 1 Chassis ID SEP00141CBCDBFE Port ID Port 1 Software version P0030301MFG2 Platform Cisco IP Phone 7960 Duplex Full CDP neighbor information of port 2 Ethernet1 0 2 CDP neighbor index 2 Chassis ID SEP00141CBCDBFF Port ID Port 1 Software version P0030301MFG2 Platform Cisco IP Phone 7960 Duplex Full ...

Страница 202: ...stance MSTI MVRP runs on a per MSTI basis and implements per VLAN redundant link calculation and load sharing MVRP decreases the number of packets transmitted for the same amount of VLAN configuration and improves the declaration efficiency For more information about GVRP see Configuring GVRP For more information about MSTI see Configuring spanning tree protocols Introduction to MRP MRP allows par...

Страница 203: ...nIn message New message Similar to a Join message a New message enables MRP participants to register attributes When the Multiple Spanning Tree Protocol MSTP topology changes an MRP participant sends New messages to declare the topology change On receiving a New message an MRP participant sends a New message out of each port except the receiving port Leave message An MRP participant sends Leave me...

Страница 204: ...LeaveAll message other participants re register all the attributes and re start their LeaveAll timer When the LeaveAll timer of an MRP participant expires the MRP participant sends LeaveAll messages to the remote participants On receiving a LeaveAll message a remote participant restarts its LeaveAll timer and stops sending out LeaveAll messages This mechanism effectively reduces the number of Leav...

Страница 205: ...work with STP RSTP or MSTP but not other link layer topology protocols including PVST RRPP and Smart Link Ports blocked by STP RSTP or MSTP can receive and send MVRP protocol packets For more information about STP RSTP MSTP and PVST see Configuring spanning tree protocols For more information about RRPP and Smart Link see High Availability Configuration Guide Do not enable both MVRP and remote por...

Страница 206: ...d Reference 5 Enable MVRP on the port mvrp enable By default MVRP is disabled on a port Configuring the MVRP registration mode Step Command Remarks 1 Enter system view system view N A 2 Enter interface view Enter Layer 2 Ethernet interface view or Layer 2 aggregate interface view interface interface type interface number Enter port group view port group manual port group name Use one of the comman...

Страница 207: ...conds Table 28 shows the value ranges for Join Leave and LeaveAll timers and their dependencies If you set a timer to a value beyond the allowed value range your configuration will fail To do that you can change the allowed value range by tuning the value of another related timer To restore the default settings of the timers restore the Join timer first followed by the Leave and LeaveAll timers Ta...

Страница 208: ...ce in the specified VLAN display mvrp state interface interface type interface number vlan vlan id begin exclude include regular expression Available in any view Display the MVRP running status display mvrp running status interface interface list begin exclude include regular expression Available in any view Display the MVRP statistics display mvrp statistics interface interface list begin exclude...

Страница 209: ...n Device B are not de registered Figure 69 Network diagram Configuration procedure Configuring Device A Enter MST region view DeviceA system view DeviceA stp region configuration Configure the MST region name VLAN to instance mappings and revision level DeviceA mst region region name example DeviceA mst region instance 1 vlan 10 DeviceA mst region instance 2 vlan 20 DeviceA mst region revision lev...

Страница 210: ...2 mvrp enable DeviceA Ethernet1 0 2 quit Configure port Ethernet 1 0 3 as a trunk port and configure it to permit all VLANs DeviceA interface ethernet 1 0 3 DeviceA Ethernet1 0 3 port link type trunk DeviceA Ethernet1 0 3 port trunk permit vlan all Enable MVRP on port Ethernet 1 0 3 DeviceA Ethernet1 0 3 mvrp enable DeviceA Ethernet1 0 3 quit Create VLAN 10 DeviceA vlan 10 DeviceA vlan10 quit Conf...

Страница 211: ...configure it to permit all VLANs DeviceB interface ethernet 1 0 3 DeviceB Ethernet1 0 3 port link type trunk DeviceB Ethernet1 0 3 port trunk permit vlan all Enable MVRP on port Ethernet 1 0 3 DeviceB Ethernet1 0 3 mvrp enable DeviceB Ethernet1 0 3 quit Create VLAN 20 DeviceB vlan 20 DeviceB vlan20 quit Configuring Device C Enter MST region view DeviceC system view DeviceC stp region configuration...

Страница 212: ...iceD mst region region name example DeviceD mst region instance 1 vlan 10 DeviceD mst region instance 2 vlan 20 DeviceD mst region revision level 0 Manually activate the MST region configuration DeviceD mst region active region configuration DeviceD mst region quit Globally enable the spanning tree feature DeviceD stp enable Globally enable MVRP DeviceD mvrp global enable Configure port Ethernet 1...

Страница 213: ...pe Normal Local VLANs 1 default Ethernet1 0 2 Config Status Enabled Running Status Enabled Join Timer 20 centiseconds Leave Timer 60 centiseconds Periodic Timer 100 centiseconds LeaveAll Timer 1000 centiseconds Registration Type Normal Local VLANs 1 default Ethernet1 0 3 Config Status Enabled Running Status Enabled Join Timer 20 centiseconds Leave Timer 60 centiseconds Periodic Timer 100 centiseco...

Страница 214: ...entiseconds Registration Type Normal Local VLANs 1 default 10 Ethernet1 0 3 Config Status Enabled Running Status Enabled Join Timer 20 centiseconds Leave Timer 60 centiseconds Periodic Timer 100 centiseconds LeaveAll Timer 1000 centiseconds Registration Type Normal Local VLANs 1 default 10 The output shows that Port Ethernet 1 0 1 has learned only VLAN 1 through MVRP Ports Ethernet 1 0 2 and Ether...

Страница 215: ...ated on Device A and dynamic VLAN 20 created on Device B through MVRP Port Ethernet1 0 2 has learned VLAN 1 and dynamic VLAN 20 created on Device B through MVRP Check the local VLAN information on Device D DeviceD display mvrp running status MVRP Global Info Global Status Enabled Compliance GVRP False Ethernet1 0 1 Config Status Enabled Running Status Enabled Join Timer 20 centiseconds Leave Timer...

Страница 216: ... interface ethernet 1 0 3 MVRP Global Info Global Status Enabled Compliance GVRP False Ethernet1 0 3 Config Status Enabled Running Status Enabled Join Timer 20 centiseconds Leave Timer 60 centiseconds Periodic Timer 100 centiseconds LeaveAll Timer 1000 centiseconds Registration Type Fixed Local VLANs 1 default 10 The output shows that the VLAN information on Ethernet 1 0 3 is not changed after you...

Страница 217: ...208 Local VLANs 1 default 10 The output shows that the dynamic VLAN information on Ethernet 1 0 3 is not changed after you set the MVRP registration mode to fixed on Ethernet 1 0 3 ...

Страница 218: ...ast one x y Asterisk marked square brackets enclose optional syntax choices separated by vertical bars from which you select one choice multiple choices or none 1 n The argument or keyword and argument combination before the ampersand sign can be entered 1 to n times A line that starts with a pound sign is comments GUI conventions Convention Description Boldface Window names button names field nam...

Страница 219: ... Represents an access controller a unified wired WLAN module or the access controller engine on a unified wired WLAN switch Represents an access point Represents a wireless terminator unit Represents a wireless terminator Represents a mesh access point Represents omnidirectional signals Represents directional signals Represents a security product such as a firewall UTM multiservice security gatewa...

Страница 220: ...s provide a mechanism for accessing software updates through the product interface Review your product documentation to identify the recommended software update method To download product updates go to either of the following Hewlett Packard Enterprise Support Center Get connected with updates page www hpe com support e updates Software Depot website www hpe com support softwaredepot To view and u...

Страница 221: ...r self repair CSR programs allow you to repair your product If a CSR part needs to be replaced it will be shipped directly to you so that you can install it at your convenience Some parts do not qualify for CSR Your Hewlett Packard Enterprise authorized service provider will determine whether a repair can be accomplished by CSR For more information about CSR contact your local service provider or ...

Страница 222: ...number edition and publication date located on the front cover of the document For online help content include the product name product version help edition and publication date located on the legal notices page ...

Страница 223: ...te change suppression on an Ethernet interface 5 Configuring LLDP to advertise a specific voice VLAN 132 Configuring LLDP trapping 187 Configuring load sharing for link aggregation groups 40 Configuring loopback testing on an Ethernet interface 6 Configuring MAC Information mode 27 Configuring MAC based VLANs 114 Configuring many to one VLAN mapping 170 Configuring MRP timers 197 Configuring No Ag...

Страница 224: ... MAC Information on an interface 26 Enabling MVRP 196 Enabling outputting port state transition information 77 Enabling SNMP notifications for PVST topology changes 89 Enabling the spanning tree feature 77 Ethernet interface naming conventions 1 Ethernet link aggregation configuration examples 41 Ethernet link aggregation configuration task list 35 G GVRP configuration examples 144 GVRP configurat...

Страница 225: ...216 T Testing the cable connection of an Ethernet interface 12 V VLAN mapping configuration examples 171 Voice VLAN configuration examples 134 ...

Отзывы:

Нет отзывов

Похожие инструкции для 3100 Series

Ubisys S1 Reference Manual preview
S1
Бренд: Ubisys Страницы: 40
FANATEC PODIUM Quick Manual preview
PODIUM
Бренд: FANATEC Страницы: 40
LevelOne FEP-0800 Quick Installation Manual preview
FEP-0800
Бренд: LevelOne Страницы: 17
DeLOCK 87699 User Manual preview
87699
Бренд: DeLOCK Страницы: 8
Datavideo KMU-200 Instruction Manual preview
KMU-200
Бренд: Datavideo Страницы: 64
Cypress SE-DVI-8-LC Operation Manual preview
SE-DVI-8-LC
Бренд: Cypress Страницы: 4
SMART-AVI DVN-8P Installation Manual preview
DVN-8P
Бренд: SMART-AVI Страницы: 2
Jung FAS180 Series Operating Instructions Manual preview
FAS180 Series
Бренд: Jung Страницы: 8
ENSIM SENSORS DX-ELB 11 Operating Manual preview
DX-ELB 11
Бренд: ENSIM SENSORS Страницы: 15
ORiNG TES-W9124GT-M12X-BP2-24V-IP54 Quick Installation Manual preview
TES-W9124GT-M12X-BP2-24V-IP54
Бренд: ORiNG Страницы: 2
KVMSwitchTech MTX-CAT6-2IP-4X16 Installation Manual preview
MTX-CAT6-2IP-4X16
Бренд: KVMSwitchTech Страницы: 24
AVG AVG-TMX88PRO Manual preview
AVG-TMX88PRO
Бренд: AVG Страницы: 41
PairGain 150-1111-72 Quick Installation Manual preview
150-1111-72
Бренд: PairGain Страницы: 20
Panasonic ABV BV Product Catalog preview
ABV BV
Бренд: Panasonic Страницы: 19
Palmer supreme soaker Quick Start Manual preview
supreme soaker
Бренд: Palmer Страницы: 4
JABSCO 18680-0000 Manual preview
18680-0000
Бренд: JABSCO Страницы: 2
SC&T HS42M-4K6G User Manual preview
HS42M-4K6G
Бренд: SC&T Страницы: 7
Kramer VP-23 User Manual preview
VP-23
Бренд: Kramer Страницы: 15

Бренды по названию

Популярные бренды

Загрузить еще бренды