Huawei AR3200 Series Configuration Manual - Lan
Huawei AR3200 Series Configuration Manual - Lan

Huawei AR3200 Series Configuration Manual - Lan

Enterprise routers
Hide thumbs Also See for AR3200 Series:
Table of Contents

Advertisement

Huawei AR3200 Series Enterprise Routers
V200R002C00
Configuration Guide - LAN
Issue
02
Date
2012-03-30
HUAWEI TECHNOLOGIES CO., LTD.

Advertisement

Table of Contents
loading

Summary of Contents for Huawei AR3200 Series

  • Page 1 Huawei AR3200 Series Enterprise Routers V200R002C00 Configuration Guide - LAN Issue Date 2012-03-30 HUAWEI TECHNOLOGIES CO., LTD.
  • Page 2 All other trademarks and trade names mentioned in this document are the property of their respective holders. Notice The purchased products, services and features are stipulated by the contract made between Huawei and the customer. All or part of the products, services and features described in this document may not be within the purchase scope or the usage scope.
  • Page 3: About This Document

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN About This Document About This Document Intended Audience This document describes how to configure the components for LAN services, including link aggregation groups, VLANs, voice VLANs, MAC address tables, transparent bridging, as well as GVRP, STP/RSTP, and MSTP protocols.
  • Page 4: Command Conventions

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN About This Document Command Conventions The command conventions that may be found in this document are defined as follows. Convention Description Boldface The keywords of a command line are in boldface.
  • Page 5: Table Of Contents

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN Contents Contents About This Document........................ii 1 Link Aggregation Configuration....................1 1.1 Introduction to Link Aggregation........................2 1.2 Link Aggregation Supported by the AR3200.....................2 1.3 Configuring Link Aggregation in Manual Load Balancing Mode..............3 1.3.1 Establishing the Configuration Task......................3 1.3.2 Creating an Eth-Trunk Interface........................4...
  • Page 6 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN Contents 2.1 Overview of Transparent Bridging........................31 2.2 Transparent Bridging Supported by the AR3200.....................34 2.3 Configuring Local Bridging..........................35 2.3.1 Establishing the Configuration Task.......................35 2.3.2 Creating a Bridge Group..........................36 2.3.3 Adding Local Interfaces to a Bridge Group....................37 2.3.4 (Optional) Disabling a Bridge Group from Bridging Specified Protocol Packets........38...
  • Page 7 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN Contents 2.8.5 Example for Configuring Remote Bridging with VLAN ID Transparent Transmission......73 3 VLAN Configuration........................78 3.1 Introduction to VLAN............................79 3.2 VLAN Features Supported by the AR3200......................79 3.3 Creating VLANs...............................81 3.3.1 Establishing the Configuration Task.......................81 3.3.2 Creating a VLAN.............................82...
  • Page 8 4.3.5 (Optional) Configuring an 802.1p Priority and a DSCP Value for the Voice VLAN......129 4.3.6 (Optional) Setting the Voice VLAN Aging Time.................130 4.3.7 (Optional) Setting the Working Mode of the Voice VLAN..............130 4.3.8 (Optional) Enabling an Interface to Communicate with Non-Huawei Voice Devices......131 4.3.9 Checking the Configuration........................132 4.4 Configuration Examples..........................132 4.4.1 Example for Configuring a Voice VLAN in Auto Mode..............132...
  • Page 9 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN Contents 6.3.2 Creating a Static MAC Address Entry....................157 6.3.3 Creating a Blackhole MAC Address Entry...................158 6.3.4 (Optional) Setting the Aging Time for Dynamic MAC Address Entries..........158 6.3.5 (Optional) Disabling MAC Address Learning..................159 6.3.6 Checking the Configuration........................160...
  • Page 10 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN Contents 7.3.4 (Optional) Configuring the Path Cost for a Port..................191 7.3.5 (Optional) Configuring Port Priorities....................192 7.3.6 Enabling STP/RSTP..........................193 7.3.7 Checking the Configuration........................193 7.4 Configuring STP/RSTP Parameters on an Interface..................194 7.4.1 Establishing the Configuration Task.....................196 7.4.2 Configuring System Parameters......................197...
  • Page 11 8.5.4 Configuring Root Protection on an Interface..................248 8.5.5 Configuring Loop Protection on an Interface..................249 8.5.6 Checking the Configuration........................250 8.6 Configuring MSTP Interoperability Between Huawei Devices and Non-Huawei Devices......251 8.6.1 Establishing the Configuration Task.....................251 8.6.2 Configuring a Proposal/Agreement Mechanism...................251 8.6.3 Configuring the MSTP Protocol Packet Format on an Interface............253 8.6.4 Enabling the Digest Snooping Function....................253...
  • Page 12: Link Aggregation Configuration

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 1 Link Aggregation Configuration Link Aggregation Configuration About This Chapter This chapter describes link aggregation concepts and how to configure link aggregation groups while also providing configuration examples. 1.1 Introduction to Link Aggregation This section describes the concept of link aggregation.
  • Page 13: Introduction To Link Aggregation

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 1 Link Aggregation Configuration 1.1 Introduction to Link Aggregation This section describes the concept of link aggregation. Link aggregation refers to a method of bundling a group of physical interfaces into a logical interface to increase bandwidth and improve reliability.
  • Page 14: Configuring Link Aggregation In Manual Load Balancing Mode

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 1 Link Aggregation Configuration Manual load balancing mode: Generally, all member interfaces are active interfaces unless a fault occurs. Static LACP mode: The interfaces connected to M links are active interfaces that forward data;...
  • Page 15: Creating An Eth-Trunk Interface

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 1 Link Aggregation Configuration Figure 1-2 Network diagram of link aggregation in manual load balancing mode RouterA RouterB Eth-Trunk 1 Eth-Trunk 1 Eth-Trunk Pre-configuration Tasks Before configuring an Eth-Trunk in manual load balancing mode, complete the following tasks:...
  • Page 16: Configuring An Eth-Trunk To Work In Manual Load Balancing Mode

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 1 Link Aggregation Configuration Run: interface eth-trunk trunk-id A Layer 2 Eth-Trunk interface is created. Run: undo portswitch The Eth-Trunk interface is configured to work in Layer 3 mode. Run: ip address ip-address { mask | mask-length } [ sub ] An IP address is configured for the Layer 3 Eth-Trunk interface.
  • Page 17: Adding Member Interfaces To An Eth-Trunk

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 1 Link Aggregation Configuration The system view is displayed. Step 2 Run: interface eth-trunk trunk-id The Eth-Trunk interface view is displayed. Step 3 Run: mode manual load-balance The operation mode of the Eth-Trunk is set to manual load balancing.
  • Page 18: Optional) Configuring The Load Balancing Mode

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 1 Link Aggregation Configuration – Member interfaces of a Layer 2 Eth-Trunk must be Layer 2 interfaces, and member interfaces of a Layer 3 Eth-Trunk must be Layer 3 interfaces. – An Eth-Trunk supports a maximum of eight member interfaces.
  • Page 19: Optional) Limiting The Number Of Active Interfaces

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 1 Link Aggregation Configuration NOTE All Layer 2 Eth-Trunks in the system must use the same load balancing mode. If the load balancing mode of one Eth-Trunk is changed, all the other Eth-Trunks use the new load balancing mode.
  • Page 20: Checking The Configuration

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 1 Link Aggregation Configuration NOTE l The maximum number of interfaces that determine bandwidth for an Eth-Trunk on the local AR3200 and that on the remote AR3200 can be different. If the values of this setting at the two ends are different, the smaller value is used.
  • Page 21: Configuring Link Aggregation In Static Lacp Mode

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 1 Link Aggregation Configuration Interface Ethernet2/0/1, valid, operate down, weight=1 Interface Ethernet2/0/2, valid, operate down, weight=1 Run the display eth-trunk command to check the load balancing mode of the Eth-Trunk. By default, the load balancing mode of the Layer 2 Eth-Trunk is displayed as "SA-XOR-DA"...
  • Page 22: Creating An Eth-Trunk Interface

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 1 Link Aggregation Configuration Data Number of the Eth-Trunk in static LACP mode Types and numbers of the member interfaces Maximum number of active interfaces 1.4.2 Creating an Eth-Trunk Interface Context Eth-Trunk interfaces increase bandwidth and improve transmission reliability.
  • Page 23: Configuring An Eth-Trunk To Work In Static Lacp Mode

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 1 Link Aggregation Configuration CAUTION l The mtu command cannot be used on Layer 2 Eth-Trunk interfaces. l Directly connected interfaces must use the same MTU. If you change the MTU of an interface, you must use the mtu command to change the MTU of the peer interface to the same value;...
  • Page 24 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 1 Link Aggregation Configuration Procedure Configuration in the Eth-Trunk interface view Run: system-view The system view is displayed. Run: interface eth-trunk trunk-id The Eth-Trunk interface view is displayed. Run: trunkport interface-type { interface-number1 [ to interface-number2 ] } &<1-8>...
  • Page 25: Optional) Configuring The Load Balancing Mode

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 1 Link Aggregation Configuration – After an interface is added to an Eth-Trunk, MAC address learning is performed by the Eth-Trunk rather than the member interfaces. ----End 1.4.5 (Optional) Configuring the Load Balancing Mode Context Perform the following steps on the AR3200 to configure an Eth-Trunk in load balancing mode.
  • Page 26: Optional) Limiting The Number Of Active Interfaces

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 1 Link Aggregation Configuration 1.4.6 (Optional) Limiting the Number of Active Interfaces Context Perform the following steps on the AR3200 to limit the number of active interfaces. Procedure Setting the maximum number of active interfaces...
  • Page 27: Optional) Setting The Lacp Priority Of The System

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 1 Link Aggregation Configuration NOTE l The minimum number of active interfaces must be smaller than or equal to the maximum number of active interfaces. l The minimum number of active interfaces on the local AR3200 and that on the remote AR3200 can be different.
  • Page 28: Optional) Enabling Lacp Preemption And Setting The Preemption Delay

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 1 Link Aggregation Configuration The LACP priority is set for the interface. By default, the LACP priority of an interface is 32768. ----End 1.4.9 (Optional) Enabling LACP Preemption and Setting the...
  • Page 29: Optional) Setting The Timeout Interval For Receiving Lacp Packets

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 1 Link Aggregation Configuration 1.4.10 (Optional) Setting the Timeout Interval for Receiving LACP Packets Context Perform the following steps on the AR3200 to set the timeout interval for receiving LACP packets.
  • Page 30: Maintaining Link Aggregation

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 1 Link Aggregation Configuration <Huawei> display trunkmembership eth-trunk 1 Trunk ID: 1 Used status: VALID TYPE: ethernet Working Mode : Static Number Of Ports in Trunk = 3 Number Of UP Ports in Trunk = 0...
  • Page 31: Debugging The Link Aggregation Group

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 1 Link Aggregation Configuration 1.5.2 Debugging the Link Aggregation Group Context CAUTION Debugging affects system performance. Run the undo debugging all command immediately after debugging is completed. When a running fault occurs in the link aggregation group, run the following debugging commands in the user view to check the debugging information, and locate and analyze the fault.
  • Page 32: Configuration Examples

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 1 Link Aggregation Configuration 1.6 Configuration Examples This section provides configuration examples of link aggregation in manual load balancing mode and in static LACP mode. 1.6.1 Example for Configuring Link Aggregation in Manual Load...
  • Page 33 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 1 Link Aggregation Configuration Data Preparation To complete the configuration, you need the following data: Number of the Eth-Trunk Types and numbers of the member interfaces in the Eth-Trunk Procedure Step 1 Create an Eth-Trunk.
  • Page 34: Example For Configuring Link Aggregation In Static Lacp Mode

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 1 Link Aggregation Configuration Ethernet2/0/3 Ethernet2/0/4 The preceding information indicates that Eth-Trunk 1 consists of member interfaces Ethernet 2/0/3 and Ethernet 2/0/4. The member interfaces are both in Up state. ----End...
  • Page 35 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 1 Link Aggregation Configuration Create an Eth-Trunk on each Router and configure the Eth-Trunk to work in static LACP mode. Add member interfaces to the Eth-Trunk. Set the system priority and determine the Actor.
  • Page 36 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 1 Link Aggregation Configuration Step 3 Set the system priority on RouterA to 100 so that RouterA becomes the Actor. [RouterA] lacp priority 100 Step 4 Set maximum number of active interfaces in the Eth-Trunk on RouterA to 2.
  • Page 37: Example For Configuring Layer 3 Link Aggregation

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 1 Link Aggregation Configuration Ethernet2/0/1 00e0-fca8-0417 6145 2865 11111100 Ethernet2/0/2 00e0-fca8-0417 6146 2865 11111100 Ethernet2/0/3 00e0-fca8-0417 32768 6147 2865 11110000 The preceding information shows that the system priority of RouterA is 100, which is higher than the system priority of RouterB.
  • Page 38 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 1 Link Aggregation Configuration Figure 1-6 Network diagram of Layer 3 link aggregation Eth-Trunk1 RouterA RouterB 100.1.1.1/24 GE1/0/0 GE1/0/0 GE2/0/0 GE2/0/0 Eth-Trunk1 100.1.1.2/24 Configuration Roadmap The configuration roadmap is as follows: Create a Layer 3 Eth-Trunk interface on each device and configure an IP addresses for each Eth-Trunk interface.
  • Page 39 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 1 Link Aggregation Configuration [RouterB-Eth-Trunk1] quit # Add GE1/0/0 and GE2/0/0 to Eth-Trunk 1. [RouterB] interface gigabitethernet 1/0/0 [RouterB-GigabitEthernet1/0/0] eth-trunk 1 [RouterB-GigabitEthernet1/0/0] quit [RouterB] interface gigabitethernet 2/0/0 [RouterB-GigabitEthernet2/0/0] eth-trunk 1 [RouterB-GigabitEthernet2/0/0] quit Step 3 Verify the configuration.
  • Page 40 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 1 Link Aggregation Configuration interface GigabitEthernet2/0/0 eth-trunk 1 return Configuration file of RouterB sysname RouterB interface Eth-Trunk1 undo portswitch ip address 100.1.1.2 255.255.255.0 interface GigabitEthernet1/0/0 eth-trunk 1 interface GigabitEthernet2/0/0 eth-trunk 1...
  • Page 41: Transparent Bridging Configuration

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration Transparent Bridging Configuration About This Chapter Transparent bridges are widely used in Ethernet LANs because they are easy to configure and operate. 2.1 Overview of Transparent Bridging...
  • Page 42: Overview Of Transparent Bridging

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration 2.1 Overview of Transparent Bridging This section describes the background, advantages, and working principles of transparent bridges applications in a LAN Background Ethernet LANs have become the dominant type of LAN technology due to their robust expandability and cost effectiveness.
  • Page 43 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration Figure 2-1 Networking diagram for local bridging User 1 User 4 RouterA User 2 User 5 User 3 User 6 LAN 1 LAN 2 After local bridging of the transparent bridge has been configured, the bridge group configured...
  • Page 44 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration Figure 2-2 Networking diagram for remote bridging User 1 User 4 RouterA RouterB User 2 User 5 Network User 3 User 6 LAN 2 LAN 1 To support remote bridging, the transparent bridge provides the following functions:...
  • Page 45: Transparent Bridging Supported By The Ar3200

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration Figure 2-3 Networking diagram for integrated bridging and routing Bridge-if RouterB RouterA 1.1.1.1/24 Network User 1 User 2 User 3 User 4 1.1.1.12/24 1.1.1.13/24 3.1.1.14/24 2.1.1.16/24 VLAN ID Transparent Transmission By default, an outbound interface in a bridge group removes the VLAN IDs of the packets to be sent out.
  • Page 46: Configuring Local Bridging

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration Table 2-1 Transparent bridging usage scenarios Scenar Users in the Users in the Users in Users in Same Same Different Different Geographical Geographical Geographical Geographical Location and...
  • Page 47: Creating A Bridge Group

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration Data Number of a bridge group (Optional) Static MAC address entry, blackhole MAC address entry, or aging time for the dynamic MAC entry of the bridge group Numbers of interfaces to be added to the bridge group 2.3.2 Creating a Bridge Group...
  • Page 48: Adding Local Interfaces To A Bridge Group

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration By default, no blackhole MAC address entry is configured. Configure attributes for dynamic MAC address entries of a bridge group. – Run: undo mac-address learning disable Dynamic MAC address learning is enabled.
  • Page 49: Optional) Disabling A Bridge Group From Bridging Specified Protocol Packets

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: interface interface-type interface-number The user-side interface view is displayed. Step 3 Run: bridge bridge-id An interface is added to a bridge group.
  • Page 50: Configuring Local Bridging Integrated With Ip Routing

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration Prerequisites The configurations for local bridging are complete. Procedure Run the display bridge [ bridge-id ] information command to view information about the bridge group. Run the display bridge traffic [ bridge birdge-id | interface interface-type interface- number ] command to view the traffic statistics on a specified interface in the bridge group.
  • Page 51: Establishing The Configuration Task

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration 2.4.1 Establishing the Configuration Task Before configuring local bridging integrated with IP routing, familiarize yourself with the applicable environment, complete the pre-configuration tasks, and obtain the data required for the configuration.
  • Page 52: Adding Local Interfaces To A Bridge Group

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration Multiple devices can use the same bridge number. ----End Follow-up Procedure By default, dynamic MAC address learning is enabled for a bridge group. When a network is insecure and vulnerable to attacks, you can disable dynamic MAC address learning and use static MAC address entries for traffic forwarding.
  • Page 53 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration Use a VLAN to add users to the bridge group. Create a VLAN on a bridge and add users to the VLAN. Users then connect to the bridge group through the VLANIF interface. User 1 and User 2 use this method.
  • Page 54: Configuring A Bridge-If Interface For A Bridge Group

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration 2.4.4 Configuring a Bridge-if Interface for a Bridge Group LANs on different network segments can communicate with each other by using a Bridge-if interface. Context A Bridge-if interface is a virtual routed interface.
  • Page 55: Optional) Disabling A Bridge Group From Bridging Specified Protocol Packets

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration The bridge group view is displayed. Step 3 Run: routing ip IP routing is enabled for the bridge group. The IP routing function cannot be configured if any of member interfaces in the bridge group has an IP address.
  • Page 56: Configuring Remote Bridging

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration Run the display bridge traffic [ bridge bridge-id | interface interface-type interface- number ] command to view the traffic statistics on a specified interface in the bridge group.
  • Page 57: Creating A Bridge Group

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration Applicable Environment To allow LANs on the same network segment but in different geographic locations to communicate with each other at the link layer, you can configure remote bridging. To allow users in the same VLAN to communicate with each other and isolate users in different VLANs, VLAN ID transparent transmission needs to be enabled.
  • Page 58: Adding User-Side Interfaces To A Bridge Group

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration Configure a static MAC address entry for a bridge group. – Run: mac-address static mac-address interface-type interface-number bridge bridge-id A static MAC address entry is configured for a bridge group.
  • Page 59: Adding Network-Side Interfaces To A Bridge Group

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration Figure 2-6 Networking diagram for adding users to bridge groups User 1 User 4 RouterA RouterB Network User 5 User 2 User 3 VLAN 11 Perform the following steps on the user-side interface of the device.
  • Page 60 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration Context Two devices can be connected using different types of intermediate links to bridge data between different LANs. To implement remote bridging between different LANs, add the user-side interface connecting to a LAN and the network-side interface connecting to the intermediate link to the same bridge group.
  • Page 61: Optional) Disabling A Bridge Group From Bridging Specified Protocol Packets

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration The MP group interface view is displayed. Run: link-protocol ppp PPP is enabled on the interface. l Add an FR interface to a bridge group. Run: fr dlci dlci A frame relay DLCI is created.
  • Page 62: Optional) Configuring Vlan Id Transparent Transmission

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration Step 3 Run: bridging { ip | others } disable The bridge group is disabled from bridging specified protocol packets. To allow a bridge group to forward specified protocol packets, enable the function that bridges the protocol packets on the bridge group.
  • Page 63: Configuring Remote Bridging Integrated With Ip Routing

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration Prerequisites The configurations for remote bridging are complete. Procedure Run the display bridge [ bridge-id ] information command to view information about the bridge group. Run the display bridge traffic [ bridge bridge-id | interface interface-type interface- number ] command to view the traffic statistics on a specified interface in the bridge group.
  • Page 64: Creating A Bridge Group

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration The integrated routing function uses Bridge-if interfaces for routing packets. Pre-configuration Tasks Before configuring remote bridging integrated with IP routing, complete the following task: Configuring physical parameters for interfaces to ensure that the interfaces are physically Data Preparation To configure remote bridging integrated with IP routing, you need the following data.
  • Page 65: Adding User-Side Interfaces To A Bridge Group

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration mac-address static mac-address interface-type interface-number bridge bridge-id A static MAC address entry is configured for a bridge group. By default, no static MAC address entry is configured. In a bridge group, each MAC address entry can be configured as only one static entry.
  • Page 66: Adding Network-Side Interfaces To A Bridge Group

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration Figure 2-7 Networking diagram for adding users to bridge groups User 1 User 4 RouterA RouterB Network User 5 User 2 User 3 VLAN 11 Perform the following steps on the user-side interface of the device.
  • Page 67 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration Context Two devices can be connected using different types of intermediate links to bridge data between different LANs. To implement remote bridging between different LANs, add the user-side interface connecting to a LAN and the network-side interface connecting to the intermediate link to the same bridge group.
  • Page 68: Configuring A Bridge-If Interface For A Bridge Group

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration The MP group interface view is displayed. Run: link-protocol ppp PPP is enabled on the interface. l Add an FR interface to a bridge group. Run: fr dlci dlci A frame relay DLCI is created.
  • Page 69: Enabling Ip Routing For A Bridge Group

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration The system view is displayed. Step 2 Run: interface bridge-if bridge-id A Bridge-if interface is created and the Bridge-if interface view is displayed. Step 3 Run: ip address ip-address { mask | mask-length } An IP address is configured for the Bridge-if interface.
  • Page 70: Checking The Configuration

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: bridge bridge-id The bridge group view is displayed. Step 3 Run: bridging { ip | others } disable The bridge group is disabled from bridging specified protocol packets.
  • Page 71: Maintaining Transparent Bridging

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration Last 300 seconds output rate 0 bits/sec, 0 packets/sec Realtime 18 seconds input rate 0 bits/sec, 0 packets/sec Realtime 18 seconds output rate 0 bits/sec, 0 packets/sec...
  • Page 72: Clearing The Traffic Statistics Of A Bridge Group

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration Context During routine maintenance, you can run the following commands in any view to monitor the operation of bridge groups. Procedure Run the display bridge traffic [ bridge bridge-id | interface interface-type interface- number ] command in any view to check whether the traffic statistics on a bridge group have been cleared.
  • Page 73: Configuration Example

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration Context To locate faults in a bridge group, you can clear the traffic statistics on the Bridge-if interface. CAUTION The traffic statistics cannot be restored after being cleared.
  • Page 74 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration Figure 2-8 Networking diagram of local bridging configuration RouterA Eth2/0/2 GE3/0/0 Eth2/0/1 GE4/0/0 User 1 User 2 User 3 User 4 1.1.1.1/24 1.1.1.2/24 1.1.1.3/24 1.1.1.4/24 VLAN 11...
  • Page 75 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration [RouterA-Ethernet2/0/2] quit Add VLANIF 11 and GE4/0/0 to bridge group 1. [RouterA] interface gigabitethernet 4/0/0 [RouterA-GigabitEthernet4/0/0] bridge 1 [RouterA-GigabitEthernet4/0/0] quit [RouterA] interface vlanif 11 [RouterA-Vlanif11] bridge 1 [RouterA-Vlanif11] quit Create bridge group 2.
  • Page 76: Example For Configuring Local Bridging With Ip Routing

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration interface GigabitEthernet3/0/0 bridge 2 return 2.8.2 Example for Configuring Local Bridging with IP Routing Configuring local bridging and IP routing allows LANs on different network segments to communicate with each other.
  • Page 77 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration Data Preparation To complete the configuration, you need the following data: Interfaces used to connect LANs Number of each bridge group to which the LANs that need to communicate with each other...
  • Page 78: Example For Configuring Remote Bridging

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration bridge 1 interface Ethernet2/0/1 port link-type access port default vlan 11 interface Ethernet2/0/2 port link-type access port default vlan 11 interface GigabitEthernet3/0/0 ip address 3.1.1.1 255.255.255.0 interface Bridge-if1 ip address 1.1.1.3 255.255.255.0...
  • Page 79 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration Add User 1 and User 2 to VLAN 11 on RouterA, and add User 3 and User 4 to VLAN 11 on RouterB so that users can communicate with each other.
  • Page 80 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration [RouterB-Ethernet2/0/1] port link-type access [RouterB-Ethernet2/0/1] port default vlan 11 [RouterB-Ethernet2/0/1] quit #Add VLANIF 11 to bridge group 1. [RouterB] interface vlanif 11 [RouterB-Vlanif11] bridge 1 [RouterB-Vlanif11] quit # Add GE3/0/0 to bridge group 1.
  • Page 81: Example For Configuring Remote Bridging With Ip Routing

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration 2.8.4 Example for Configuring Remote Bridging with IP Routing Configuring remote bridging with IP routing allows LANs in different geographical locations and on different network segments to communicate.
  • Page 82 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration Data Preparation To complete the configuration, you need the following data: Interfaces used to connect LANs Number of each bridge group to which the LANs that need to communicate with each other...
  • Page 83 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration # Add Eth2/0/0 to VLAN11. [RouterB] vlan 11 [RouterB-vlan11] quit [RouterB] interface ethernet 2/0/0 [RouterB-Ethernet2/0/0] port link-type access [RouterB-Ethernet2/0/0] port default vlan 11 [RouterB-Ethernet2/0/0] quit #Add VLANIF 11 to bridge group 2.
  • Page 84: Example For Configuring Remote Bridging With Vlan Id Transparent Transmission

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration bridge 2 interface Ethernet2/0/0 port link-type access port default vlan 11 interface GigabitEthernet3/0/0 bridge 2 return 2.8.5 Example for Configuring Remote Bridging with VLAN ID Transparent Transmission Remote bridging with VLAN ID transparent transmission allows the devices in the same VLAN but different in locations to communicate with each other.
  • Page 85 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration Configuration Roadmap The configuration roadmap is as follows: On Switch 1 and Switch 2: Create VLANs. Add interfaces to the VLANs. Configure interfaces to allow the packets from VLAN 11 and VLAN 12 to pass through.
  • Page 86 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration [Switch1] interface ethernet 1/0/1 [Switch1-Ethernet1/0/1] port link-type access [Switch1-Ethernet1/0/1] port default vlan 11 [Switch1-Ethernet1/0/1] quit [Switch1] interface ethernet 1/0/2 [Switch1-Ethernet1/0/2] port link-type access [Switch1-Ethernet1/0/2] port default vlan 12 [Switch1-Ethernet1/0/2] quit # Configure Eth 1/0/3 to allow the packets from VLAN 11 and VLAN 12 to pass through.
  • Page 87 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration sysname RouterA vlan batch 11 to 12 bridge 1 interface Ethernet1/0/0 bridge 1 bridge vlan-transmit enable interface Ethernet2/0/0 bridge 1 bridge vlan-transmit enable return Configuration file of Router B...
  • Page 88 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 2 Transparent Bridging Configuration port default vlan 11 interface Ethernet1/0/2 port link-type access port default vlan 12 interface Ethernet1/0/3 port link-type trunk port trunk allow-pass vlan 11 to 12 return Issue 02 (2012-03-30) Huawei Proprietary and Confidential Copyright ©...
  • Page 89: Vlan Configuration

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration VLAN Configuration About This Chapter This chapter describes the concepts and configurations of VLANs, while also providing configuration examples. 3.1 Introduction to VLAN This section describes the concept of the VLAN.
  • Page 90: Introduction To Vlan

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration 3.1 Introduction to VLAN This section describes the concept of the VLAN. Definition of a VLAN A local area network (LAN) can be divided into several logical LANs. Each logical LAN is a broadcast domain, which is called a virtual LAN (VLAN).
  • Page 91 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration Table 3-1 Processing of packets on different ports Port Type Untagged Packet Tagged Packet Packet to Be Sent Received Received Access port Accepts and adds the l When the VLAN ID...
  • Page 92: Creating Vlans

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration VLAN Aggregation To implement inter-VLAN communication on routers, you need to configure IP addresses for the VLANIF interfaces. When many VLANs are deployed, a large number of IP addresses are occupied.
  • Page 93: Creating A Vlan

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration Data VLAN ID 3.3.2 Creating a VLAN Context Perform the following steps on the AR3200 to create a VLAN. Procedure Step 1 Run: system-view The system view is displayed.
  • Page 94: Checking The Configuration

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration 3.3.4 Checking the Configuration Procedure Step 1 Run the display vlan [ vlan-id [ verbose ] ] command to check information about a VLAN. ----End Example Run the display vlan command to view information about VLANs.
  • Page 95: Adding An Access Interface To A Vlan

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration Applicable Environment You can use VLANs to isolate interfaces that process different services. For example, if interface 1 and interface 2 connect to broadband access users and interface 3 connects to users of video services, you can add interface 1 and interface 2 to a VLAN and add interface 3 to another VLAN.
  • Page 96: Adding A Trunk Interface To A Vlan

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration The system view is displayed. Run: vlan vlan-id The VLAN view is displayed. Run: port interface-type { interface-number1 [ to interface-number2 ] }&<1-10> The access interface is added to the VLAN, which becomes the default VLAN of the interface.
  • Page 97: Adding A Hybrid Interface To A Vlan

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration port link-type trunk The link type of the interface is set to trunk. By default, the interface type is hybrid. Step 4 Run: port trunk allow-pass vlan { vlan-id1 [ to vlan-id2 ] }&<1-10>...
  • Page 98: Optional) Specifying The Default Vlan For A Hybrid Interface

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: interface interface-type interface-number The interface view is displayed. Step 3 Run: port link-type trunk The link type of the interface is set to trunk.
  • Page 99: Checking The Configuration

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration port hybrid pvid vlan vlan-id The default VLAN of the hybrid interface is specified. By default, VLAN 1 is the default VLAN of hybrid interfaces. An interface does not belong to the default VLAN after the default VLAN is specified. To enable the interface to forward packets of the default VLAN, add the interface to the default VLAN.
  • Page 100: Configuring Vlanif Interfaces To Implement Layer-3 Communication

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration Output bandwidth utilization threshold: 100.00% Input bandwidth utilization : 0.00% Output bandwidth utilization : 0.00% Run the display vlan [ vlan-id ] command to view interfaces in a VLAN. The following information shows that Ethernet2/0/1 is added to VLAN 2.
  • Page 101: Creating A Vlanif Interface

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration 3.5.2 Creating a VLANIF Interface Context Perform the following steps on the AR3200 to create a VLANIF interface. Procedure Step 1 Run: system-view The system view is displayed.
  • Page 102: Optional) Configuring Vlan Damping

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration run the shutdown command and then the undo shutdown command, or run the restart command in the interface view. If you change the MTU of an interface, you must use the mtu command to change the MTU of the peer interface to the same value;...
  • Page 103: Checking The Configuration

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration By default, the damping time is 0 seconds, indicating that VLAN damping is not performed. ----End 3.5.6 Checking the Configuration Procedure Step 1 Run the display interface vlanif [ vlan-id ] command to check information about a VLANIF interface.
  • Page 104: Configuring Sub-Vlans

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration Figure 3-1 Application scenario of VLAN aggregation Router Super VLAN4 Sub-VLAN 2 Sub-VLAN 3 When numerous VLANs exist on the Ethernet, VLAN aggregation can simplify the configuration. Pre-configuration Tasks...
  • Page 105: Creating A Super-Vlan

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: interface interface-type interface-number The interface view is displayed. Step 3 Run: port link-type access The link type of the interface is set to access.
  • Page 106: Assigning An Ip Address To The Vlanif Interface Of The Super-Vlan

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration The super-VLAN and sub-VLANs must use different VLAN IDs. A super-VLAN cannot contain any physical interfaces. Step 4 Run: access-vlan { vlan-id1 [ to vlan-id2 ] } &<1-10>...
  • Page 107: Checking The Configuration

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration The system view is displayed. Step 2 Run: interface vlanif vlan-id The VLANIF interface view is displayed. The vlan-id parameter specifies the ID of the super-VLAN. Step 3 Run: arp-proxy inter-sub-vlan-proxy enable Proxy ARP is enabled between sub-VLANs.
  • Page 108: Configuring Mux Vlan

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration Current system time: 2007-09-09 19:29:45 Input bandwidth utilization : -- Output bandwidth utilization : -- Run the display sub-vlan command. The command output shows mappings between sub- VLANs and super-VLANs.
  • Page 109: Configuring A Principal Vlan

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration 3.7.2 Configuring a Principal VLAN Context Perform the following steps on the AR3200 to configure a principal VLAN. Procedure Step 1 Run: system-view The system view is displayed.
  • Page 110: Enabling The Mux Vlan Function On An Interface

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration NOTE vlan-id1 and vlan-id2 are integers that range from 1 to 4094. vlan-id2 must be greater than vlan-id1. Configuring the subordinate separate VLAN Run: system-view The system view is displayed.
  • Page 111: Configuring A Management Vlan

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration Procedure Step 1 Run the display mux-vlan command to check information about MUX VLAN. ----End Example Run the display mux-vlan command to view the principal VLAN and subordinate VLANs.
  • Page 112: Checking The Configuration

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration Context Perform the following steps on the AR3200 to configure a management VLAN. Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: vlan vlan-id A VLAN is created and the VLAN view is displayed.
  • Page 113 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration Networking Requirements An enterprise requires departments in charge of the same service to communicate with each other while isolating departments in charge of different services. As shown in Figure 3-2, an enterprise has four departments.
  • Page 114 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration <Huawei> system-view [Huawei] vlan 2 [Huawei-vlan2] quit # Set the link type of Ethernet 2/0/1 to trunk and add Ethernet 2/0/1 to VLAN 2. [Huawei] interface ethernet 2/0/1...
  • Page 115: Example For Configuring Communication Between Vlans Using Vlanif Interfaces

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration port trunk allow-pass vlan 3 interface Ethernet2/0/4 port link-type trunk port trunk allow-pass vlan 3 return 3.9.2 Example for Configuring Communication Between VLANs Using VLANIF Interfaces Networking Requirements...
  • Page 116 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration Ethernet 2/0/1 of SwitchA belongs to VLAN 10. Ethernet 2/0/2 of SwitchA belongs to VLAN 20. Ethernet 2/0/3 of SwitchA belongs to VLAN 10 and VLAN 20. Procedure Step 1 Configure the Router.
  • Page 117: Example For Configuring Vlan Damping

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration Configuration Files Configuration file of the Router sysname Router vlan batch 10 20 interface Vlanif10 ip address 10.10.10.1 255.255.255.0 interface Vlanif20 ip address 20.20.20.1 255.255.255.0 interface Ethernet2/0/1 port link-type trunk...
  • Page 118 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration Figure 3-4 Networking diagram of VLAN damping configuration network Router VLANIF10 10.100.100.100/24 VLAN 10 10.100.100.111/24 10.100.100.110/24 Configuration Roadmap The configuration roadmap is as follows: Create a VLAN. Add interfaces to the VLAN.
  • Page 119: Example For Configuring Vlan Aggregation

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration # Add Ethernet 2/0/0 to VLAN 10. [Router] interface ethernet 2/0/0 [Router-Ethernet2/0/0] port link-type access [Router-Ethernet2/0/0] port default vlan 10 [Router-Ethernet2/0/0] quit # Add Ethernet 2/0/1 to VLAN 10.
  • Page 120 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration Networking Requirements As shown in Figure 3-5, VLAN 2 and VLAN 3 are combined into a super-VLAN, VLAN 4. The sub-VLANs (VLAN 2 and VLAN 3) cannot ping each other.
  • Page 121 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration # Configure Ethernet 2/0/1 as an access interface. <Huawei> system-view [Huawei] interface ethernet 2/0/1 [Huawei-Ethernet2/0/1] port link-type access [Huawei-Ethernet2/0/1] quit # Configure Ethernet 2/0/2 as an access interface.
  • Page 122: Example For Configuring The Mux Vlan Function

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration After the preceding configuration is complete, the personal computers and the Router can ping each other, but the computers in VLAN 2 and the computers in VLAN 3 cannot ping each other.
  • Page 123 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration To meet the preceding requirements, the enterprise needs to perform the following configurations: configure VLAN 2 as a principal VLAN and add Ethernet 2/0/1 to VLAN 2; configure VLAN 3 as a subordinate group VLAN and add Ethernet 2/0/2 and Ethernet 2/0/3 to VLAN 3;...
  • Page 124 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration <Huawei> system-view [Huawei] vlan batch 2 3 4 [Huawei] quit # Configure the principal VLAN, subordinate VLANs, and interfaces. <Huawei> system-view [Huawei] vlan 2 [Huawei-vlan2] mux-vlan [Huawei-vlan2] subordinate group 3...
  • Page 125: Example For Configuring Inter-Device Mux Vlan

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration port default vlan 2 port mux-vlan enable interface Ethernet2/0/2 port link-type access port default vlan 3 port mux-vlan enable interface Ethernet2/0/3 port link-type access port default vlan 3...
  • Page 126 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration Figure 3-7 Network diagram of inter-device MUX VLAN VLAN2 VLAN2 ServerA ServerB Eth2/0/1 Eth2/0/1 Eth2/0/6 Eth2/0/6 RouterA RouterB HostA HostB HostC HostD HostE HostF HostG HostH VLAN3 VLAN4...
  • Page 127 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration # Configure the principal VLAN and subordinate VLANs. <RouterA> system-view [RouterA] vlan 2 [RouterA-vlan2] mux-vlan [RouterA-vlan2] subordinate group 3 [RouterA-vlan2] subordinate separate 4 [RouterA-vlan2] quit # Add Ethernet2/0/1 to Ethernet2/0/5 to VLANs and enable the MUX VLAN function on the interfaces.
  • Page 128 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration [RouterB-Ethernet2/0/1] port mux-vlan enable [RouterB-Ethernet2/0/1] quit [RouterB] interface ethernet 2/0/2 [RouterB-Ethernet2/0/2] port link-type access [RouterB-Ethernet2/0/2] port default vlan 3 [RouterB-Ethernet2/0/2] port mux-vlan enable [RouterB-Ethernet2/0/2] quit [RouterB] interface ethernet 2/0/3...
  • Page 129 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration port link-type access port default vlan 3 port mux-vlan enable interface Ethernet2/0/4 port link-type access port default vlan 4 port mux-vlan enable interface Ethernet2/0/5 port link-type access port default vlan 4...
  • Page 130: Example For Configuring Communication Across A Layer 3 Network Using Vlanif Interfaces

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration 3.9.7 Example for Configuring Communication Across a Layer 3 Network Using VLANIF Interfaces Networking Requirements As shown in Figure 3-8, RouterA and RouterB connect to Layer 2 networks on VLAN 10.
  • Page 131 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration Ethernet 2/0/1 of RouterB belongs to VLAN 30, and IP address of VLANIF 30 is 30.30.30.2/24. IP address of the computer on the Layer 2 network connected to RouterA is 10.10.10.2/24.
  • Page 132 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration [RouterB-Vlanif10] quit [RouterB] interface vlanif 30 [RouterB-Vlanif30] ip address 30.30.30.2 24 [RouterB-Vlanif30] quit # Configure basic OSPF functions. [RouterB] router id 2.2.2.2 [RouterB] ospf [RouterB-ospf-1] area 0 [RouterB-ospf-1-area-0.0.0.0] network 20.20.20.0 0.0.0.255 [RouterB-ospf-1-area-0.0.0.0] network 30.30.30.0 0.0.0.255...
  • Page 133 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 3 VLAN Configuration interface Vlanif10 ip address 20.20.20.1 255.255.255.0 interface Vlanif30 ip address 30.30.30.2 255.255.255.0 interface Ethernet2/0/1 port link-type trunk port trunk allow-pass vlan 30 interface Ethernet2/0/2 port link-type trunk port trunk allow-pass vlan 10 ospf 1 area 0.0.0.0...
  • Page 134: Voice Vlan Configuration

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 4 Voice VLAN Configuration Voice VLAN Configuration About This Chapter This chapter describes voice VLAN concepts and how to configure voice VLAN. 4.1 Voice VLAN Overview This section describes the voice VLAN concepts.
  • Page 135: Voice Vlan Overview

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 4 Voice VLAN Configuration 4.1 Voice VLAN Overview This section describes the voice VLAN concepts. Data flows of the high speed Internet (HSI), voice over IP (VoIP), and Internet protocol television (IPTV) services are transmitted on a network.
  • Page 136: Configuring A Voice Vlan

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 4 Voice VLAN Configuration The voice VLAN supports the secure mode and normal mode for transmitting different data flows. Table 4-1 describes the two working modes. Table 4-1 Packet processing in different working modes of the voice VLAN...
  • Page 137 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 4 Voice VLAN Configuration Figure 4-1 Application scenario of the voice VLAN DHCP Server Internet Router VoIP IPTV After the voice VLAN is configured on the Router, the Router identifies voice data flows based on the source MAC addresses of incoming data flows.
  • Page 138: Enabling The Voice Vlan Function On An Interface

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 4 Voice VLAN Configuration 4.3.2 Enabling the Voice VLAN Function on an Interface After the voice VLAN is configured on the AR3200, the AR3200 identifies voice data flows based on the source MAC addresses of incoming data flows. If the source MAC address of a flow matches the OUI configured on the AR3200, the flow is identified as a voice data flow.
  • Page 139: Optional) Setting The Mode For Adding An Interface To The Voice Vlan

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 4 Voice VLAN Configuration Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: voice-vlan mac-address mac-address mask oui-mask [ description text ] The OUI of the voice VLAN is set.
  • Page 140: Optional) Configuring An 802.1P Priority And A Dscp Value For The Voice Vlan

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 4 Voice VLAN Configuration The system view is displayed. Run: interface interface-type interface-number The interface view is displayed. Run: voice-vlan mode manual The mode used to add the interface to the voice VLAN is set to manual.
  • Page 141: Optional) Setting The Voice Vlan Aging Time

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 4 Voice VLAN Configuration By default, the 802.1p priority and DSCP value for a voice VLAN are 6 and 46 respectively. ----End 4.3.6 (Optional) Setting the Voice VLAN Aging Time The voice VLAN aging time can only be set when the VLAN is in auto mode.
  • Page 142: Optional) Enabling An Interface To Communicate With Non-Huawei Voice Devices

    IP phones of some vendors send proprietary protocol packets instead of DHCP packets to apply for an IP address. To enable a Huawei device to communicate with non-Huawei voice devices, you can use the voice-vlan legacy command to enable the Huawei device to identify proprietary protocol packets.
  • Page 143: Checking The Configuration

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 4 Voice VLAN Configuration 4.3.9 Checking the Configuration You can check the voice VLAN configuration, including the OUI, working mode, aging time, and interface on which the voice VLAN is enabled.
  • Page 144 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 4 Voice VLAN Configuration As shown in Figure 4-2, the voice VLAN function is configured on the Router. The Router determines whether a data packet received by Ethernet2/0/1 is a voice data packet based on the source MAC address.
  • Page 145 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 4 Voice VLAN Configuration Voice VLAN aging time: 100 minutes Default VLAN of Ethernet2/0/1: VLAN 6 IP address of the WAN-side interface: 192.168.4.1/24 Re-marked DSCP priority for voice data packets with the source MAC address...
  • Page 146 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 4 Voice VLAN Configuration ff00-0000 [Huawei-classifier-c1] if-match vlan-id 2 [Huawei-classifier-c1] quit # Configure traffic behavior b1 on the Router to re-mark the priority of voice data packets. [Huawei] traffic behavior b1...
  • Page 147: Example For Configuring A Voice Vlan In Manual Mode

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 4 Voice VLAN Configuration vlan batch 2 6 voice-vlan aging-time 100 voice-vlan mac-address 0011-2200-0000 mask ffff-ff00-0000 traffic classifier c1 operator and if-match source-mac 0011-2200-0000 mac-address-mask ffff-ff00-0000 if-match vlan-id 2 traffic behavior b1...
  • Page 148 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 4 Voice VLAN Configuration Figure 4-3 Networking diagram of a voice VLAN in manual mode DHCP Server Internet GE3/0/0 Router Eth2/0/1 VoIP IPTV Configuration Roadmap The configuration roadmap is as follows: Create VLANs and VLANIF interfaces on the Router and configure interfaces so that enterprise users can access the WAN through the Router.
  • Page 149 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 4 Voice VLAN Configuration Procedure Step 1 Create VLANs and configure interfaces on the Router. # Create VLAN 2 and VLAN 6. <Huawei> system-view [Huawei] vlan batch 2 6 # Configure the link type and default VLAN of Ethernet2/0/1.
  • Page 150 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 4 Voice VLAN Configuration [Huawei] traffic policy p1 [Huawei-trafficpolicy-p1] classifier c1 behavior b1 [Huawei-trafficpolicy-p1] quit [Huawei] interface ethernet 2/0/1 [Huawei-Ethernet2/0/1] traffic-policy p1 inbound [Huawei-Ethernet2/0/1] quit [Huawei] quit Step 4 Verify the configuration.
  • Page 151 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 4 Voice VLAN Configuration classifier c1 behavior b1 interface Vlanif2 ip address 192.168.2.1 255.255.255.0 interface Ethernet2/0/1 port hybrid pvid vlan 6 port hybrid tagged vlan 2 port hybrid untagged vlan 6...
  • Page 152: Gvrp Configuration

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 5 GVRP Configuration GVRP Configuration About This Chapter This chapter describes basic GVRP concepts, GVRP configuration procedures, and concludes with a GVRP configuration example. 5.1 GVRP Overview This section explains the concept of Generic Attribute Registration Protocol (GARP) and GARP VLAN Registration Protocol (GVRP), and how they relate to each another.
  • Page 153: Gvrp Overview

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 5 GVRP Configuration 5.1 GVRP Overview This section explains the concept of Generic Attribute Registration Protocol (GARP) and GARP VLAN Registration Protocol (GVRP), and how they relate to each another. GVRP GVRP is an application of GARP that maintains and propagates VLAN registration information to other devices.
  • Page 154 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 5 GVRP Configuration message the first time, it sends the Join message again. The Join timer specifies the interval between the two Join messages. Leave timer: When a GARP participant expects other participants to deregister its attribute, it sends Leave messages to other participants.
  • Page 155 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 5 GVRP Configuration Figure 5-1 Format of a GARP packet DA SA length DSAP SSAP Ctrl Ethernet Frame Protocol ID Message 1 … Message N End Mark GARP PDU structure Attribute Type...
  • Page 156: Gvrp Features Supported By The Ar3200

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 5 GVRP Configuration Field Description Value Attribute Event Indicates the event that an The value can be: attribute describes. l 0: LeaveAll event l 1: JoinEmpty event l 2: JoinIn event...
  • Page 157: Configuring Gvrp

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 5 GVRP Configuration NOTE The AR3200 supports a maximum of 256 dynamic VLANs when using default GARP timers. When the recommended GARP timer settings are used, the AR3200 supports a maximum of 4094 dynamic VLANs.
  • Page 158: Optional) Setting The Registration Mode For A Gvrp Interface

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 5 GVRP Configuration GVRP is enabled globally. Step 3 Run: interface interface-type interface-number The interface view is displayed. Step 4 Run: port link-type trunk The link type of the interface is set to trunk.
  • Page 159: Optional) Setting The Garp Timers

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 5 GVRP Configuration Step 2 Run: interface interface-type interface-number The interface view is displayed. Step 3 Run: gvrp registration { fixed | forbidden | normal } The registration mode is set for the interface.
  • Page 160: Checking The Configuration

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 5 GVRP Configuration Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: garp timer leaveall timer-value The value of the LeaveAll timer is set. The default value of the LeaveAll timer is 1000 centiseconds (10 seconds).
  • Page 161: Maintaining Gvrp

    GVRP registration type : Normal Run the display garp timer interface ethernet 2/0/1 command to view the values of the GARP timers on Ethernet 2/0/1. <Huawei> display garp timer interface ethernet 2/0/1 GARP timers on port Ethernet2/0/1 GARP JoinTime : 20 centiseconds...
  • Page 162 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 5 GVRP Configuration GVRP on all routers of Company B and set the registration mode to fixed on the interfaces connected to Company A's routers. Figure 5-2 Networking diagram of GVRP configuration...
  • Page 163 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 5 GVRP Configuration [RouterA] interface ethernet 2/0/1 [RouterA-Ethernet2/0/1] port link-type trunk [RouterA-Ethernet2/0/1] port trunk allow-pass vlan all [RouterA-Ethernet2/0/1] quit [RouterA] interface ethernet 2/0/2 [RouterA-Ethernet2/0/2] port link-type trunk [RouterA-Ethernet2/0/2] port trunk allow-pass vlan all [RouterA-Ethernet2/0/2] quit # Enable GVRP on the interfaces and set the registration modes for the interfaces.
  • Page 164 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 5 GVRP Configuration Run the display gvrp statistics command on RouterA to view GVRP statistics, including the GVRP state of each interface, number of GVRP registration failures, source MAC address of the last GVRP PDU, and registration type for each interface.
  • Page 165 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 5 GVRP Configuration port trunk allow-pass vlan 2 to 4094 gvrp gvrp registration fixed interface Ethernet2/0/2 port link-type trunk port trunk allow-pass vlan 2 to 4094 gvrp return Issue 02 (2012-03-30) Huawei Proprietary and Confidential Copyright ©...
  • Page 166: Mac Address Table Configuration

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 6 MAC Address Table Configuration MAC Address Table Configuration About This Chapter This chapter describes the concepts and configurations of the MAC address table. This chapter also provides configuration examples. 6.1 MAC Address Table Overview This section describes the concept of the MAC address table.
  • Page 167: Mac Address Table Overview

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 6 MAC Address Table Configuration 6.1 MAC Address Table Overview This section describes the concept of the MAC address table. Each Line Processing Unit (LPU) on the AR3200 has a MAC address table. The MAC address table stores the MAC addresses of other devices learned by the AR3200, the VLAN IDs, and the outbound interfaces that are used to send data.
  • Page 168: Configuring The Mac Address Table

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 6 MAC Address Table Configuration address table of the AR3200 may be full. When the MAC address table is full, the AR3200 cannot learn the source MAC addresses in the valid packets.
  • Page 169: Creating A Blackhole Mac Address Entry

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 6 MAC Address Table Configuration Context Perform the following steps on the AR3200 to configure a static MAC address entry. Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run:...
  • Page 170: Optional) Disabling Mac Address Learning

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 6 MAC Address Table Configuration Step 2 Run: mac-address aging-time aging-time The aging time is set for dynamic MAC address entries. By default, the aging time of dynamic MAC address entries is 300 seconds.
  • Page 171: Checking The Configuration

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 6 MAC Address Table Configuration By default, MAC address learning is enabled in a VLAN. ----End 6.3.6 Checking the Configuration Procedure Run the display mac-address command to view information about the MAC address table.
  • Page 172: Configuring Port Security

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 6 MAC Address Table Configuration ------------------------------------------------------------------------------- Total items displayed = 1 Run the display mac-address blackhole command to view the destination MAC addresses, outbound interface numbers, and VLAN IDs of outbound interface in blackhole MAC address entries.
  • Page 173: Enabling Port Security

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 6 MAC Address Table Configuration Data Interface type and number Maximum number of MAC addresses learned on the interface (Optional) Action to perform when the number of MAC addresses reaches the limit 6.4.2 Enabling Port Security...
  • Page 174: Optional) Setting The Maximum Number Of Mac Addresses Learned By An Interface

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 6 MAC Address Table Configuration the AR3200. When this function is enabled, the AR3200 does not need to learn the MAC addresses again after restart. In addition, hosts using untrusted MAC addresses are prevented from communicating with the AR3200 through this interface.
  • Page 175: Optional) Configuring The Protective Action For An Interface

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 6 MAC Address Table Configuration After the port security function is enabled, the maximum number of MAC addresses learned by an interface is 1 by default. ----End 6.4.5 (Optional) Configuring the Protective Action for an Interface...
  • Page 176: Checking The Configuration

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 6 MAC Address Table Configuration The aging time for the secure dynamic MAC addresses learned by the interface is set. By default, secure dynamic MAC addresses will not be aged out after the port security function is enabled.
  • Page 177: Limiting Mac Address Learning On An Interface

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 6 MAC Address Table Configuration Data Preparation To configure the limitation on MAC address learning, you need the following data. Data (Optional) Rules for limiting MAC address learning on an interface or VLAN 6.5.2 Limiting MAC Address Learning on an Interface...
  • Page 178: Checking The Configuration

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 6 MAC Address Table Configuration Context Perform the following steps on the AR3200 to limit MAC address learning. Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: vlan vlan-id The VLAN view is displayed.
  • Page 179: Configuring Mac Address Flapping Detecting Function

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 6 MAC Address Table Configuration 6.6 Configuring MAC Address Flapping Detecting Function This section describes how to configure MAC address flapping detecting function. 6.6.1 Establishing the Configuration Task Applicable Environment After MAC address flapping detection is configured in a VLAN, the router checks all the MAC addresses in the VLAN to detect MAC address flapping.
  • Page 180: Unblocking An Interface Or A Mac Address

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 6 MAC Address Table Configuration A VLAN is created and the VLAN view is displayed. Step 3 Run: loop-detect eth-loop { [ block-mac ] block-time block-time retry-times retry-times | alarm-only } MAC address flapping detection is configured in the VLAN.
  • Page 181: Configuring The Router To Discard Packets With An Invalid All-0 Mac Address

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 6 MAC Address Table Configuration Example Run the display loop-detect eth-loop command to view the configuration of MAC address flapping detection in addition to information about the permanently blocked interfaces and MAC addresses.
  • Page 182: Triggering An Alarm For Packets With All-0 Mac Addresses

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 6 MAC Address Table Configuration Context Perform the following steps to configure the router to discard packets with all-0 MAC addresses. Procedure Step 1 Run: system-view The system view is displayed.
  • Page 183: Maintaining The Mac Address Table

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 6 MAC Address Table Configuration Example Run the display current-configuration command. <Huawei> display current-configuration | include drop drop illegal-mac alarm drop illegal-mac enable 6.8 Maintaining the MAC Address Table This section describes how to maintain the MAC address table.
  • Page 184 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 6 MAC Address Table Configuration To prevent hackers from using MAC addresses to attack the network, configure a static MAC address entry for each user host on the Router. Set the aging time for the dynamic MAC address entries to 500 seconds.
  • Page 185 [Huawei-Ethernet2/0/2] port hybrid untagged vlan 2 [Huawei-Ethernet2/0/2] quit # Configure static MAC address entries. [Huawei] mac-address static 0002-0002-0002 ethernet 2/0/1 vlan 2 [Huawei] mac-address static 0003-0003-0003 ethernet 2/0/1 vlan 2 [Huawei] mac-address static 0004-0004-0004 ethernet 2/0/2 vlan 2 Step 2 Set the aging time for the dynamic MAC address entries.
  • Page 186: Example For Configuring Port Security

    To achieve this information security goal, the company needs to enable the sticky MAC function on the Huawei interface connected to computers of employees and set the maximum number of MAC addresses learned on the interface to the total number of trusted computers.
  • Page 187: Example For Configuring Mac Address Limiting Rules On Interfaces

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 6 MAC Address Table Configuration Type and number of the interface connected to computers of employees VLAN allowed by the interface Protective action taken when the number of learned MAC addresses exceeds the limit...
  • Page 188 Procedure Step 1 Configure MAC address limiting rules on the interfaces. <Huawei> system-view [Huawei] interface ethernet 2/0/1 [Huawei-Ethernet2/0/1] mac-limit maximum 4 action discard alarm enable [Huawei-Ethernet2/0/1] quit [Huawei] interface ethernet 2/0/2 [Huawei-Ethernet2/0/2] mac-limit maximum 100 action discard alarm enable [Huawei-Ethernet2/0/2] quit...
  • Page 189: Example For Configuring A Mac Address Learning Rule In A Vlan

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 6 MAC Address Table Configuration Step 2 Verify the configuration. # Run the display mac-limit command in any view to check whether the MAC address limiting rules are successfully configured. <Huawei> display mac-limit...
  • Page 190 # Add Ethernet2/0/1 to VLAN 100 and VLAN 200; add Ethernet2/0/2 to VLAN 200. <Huawei> system-view [Huawei] vlan batch 100 200 [Huawei] interface ethernet 2/0/1 [Huawei-Ethernet2/0/1] port link-type trunk [Huawei-Ethernet2/0/1] port trunk allow-pass vlan 100 200 [Huawei-Ethernet2/0/1] quit [Huawei] interface ethernet 2/0/2 [Huawei-Ethernet2/0/2] port link-type trunk [Huawei-Ethernet2/0/2] port trunk allow-pass vlan 200...
  • Page 191 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 6 MAC Address Table Configuration Configuration Files Configuration file of the Router sysname Huawei vlan batch 100 200 vlan 200 mac-limit maximum 500 interface Ethernet2/0/1 port link-type trunk port trunk allow-pass vlan 100 200...
  • Page 192: Stp/Rstp Configuration

    7.2 STP/RSTP Features Supported by the AR3200 Before configuring STP/RSTP, familiarize yourself with basic STP/RSTP functions, topology convergence, STP/RSTP protection, and STP/RSTP interoperability between Huawei devices and non-Huawei devices. 7.3 Configuring Basic STP/RSTP Functions STP/RSTP is used to block redundant links on Layer 2 networks and trim a network into a loop- free tree topology.
  • Page 193: Stp/Rstp Overview

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 7 STP/RSTP Configuration 7.1 STP/RSTP Overview STP/RSTP is used to block redundant links on Layer 2 networks and trim a network into a loop- free tree topology. Background Network designers tend to deploy multiple physical links between two devices (one link is the master and the others are backups) to fulfill network redundancy requirements.
  • Page 194 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 7 STP/RSTP Configuration STP port roles – Root port The root port is the port that is nearest to the root bridge. The root port is determined based on the path cost. Among all the STP-capable ports on the network bridge, the port with the lowest root path cost is the root port.
  • Page 195 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 7 STP/RSTP Configuration As shown in Figure 7-1, RSTP defines four port roles: root port, designated port, alternate port, and backup port. The functions of the root port and designated port are the same as those defined in STP.
  • Page 196 A port in the Discarding state can only receive BPDUs. CAUTION MSTP is the default mode for all Huawei datacom devices. After a device experiences the transition from the MSTP mode to the STP mode, an STP-capable port supports the same port states as those supported by an MSTP-capable port, including the Forwarding, Learning, and Discarding states.
  • Page 197: Stp/Rstp Features Supported By The Ar3200

    7.2 STP/RSTP Features Supported by the AR3200 Before configuring STP/RSTP, familiarize yourself with basic STP/RSTP functions, topology convergence, STP/RSTP protection, and STP/RSTP interoperability between Huawei devices and non-Huawei devices. STP/RSTP is used to block redundant links on Layer 2 networks and trim a network into a loop- free tree topology.
  • Page 198 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 7 STP/RSTP Configuration Supports STP/RSTP interoperability between Huawei devices and non-Huawei devices. Certain parameters must be set on Huawei devices to ensure uninterrupted communication. Table 7-4 RSTP Protection Function Protection Scenario...
  • Page 199: Configuring Basic Stp/Rstp Functions

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 7 STP/RSTP Configuration Protection Scenario Configuration Impact Function Loop A root port or an alternate After loop protection is configured, if the protection port will age if link root port or alternate port does not receive...
  • Page 200 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 7 STP/RSTP Configuration STP/RSTP can be deployed on a network to eliminate loops. If a loop is detected, STP/RSTP blocks one port to eliminate the loop. As shown in Figure 7-2, S1, S2, S3, and S4 form a ring network, and STP/RSTP is enabled on the ring network to eliminate loops, enhancing reliability of the network.
  • Page 201: Configuring The Stp/Rstp Mode

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 7 STP/RSTP Configuration Data (Optional) Path cost of a port 7.3.2 Configuring the STP/RSTP Mode Before configuring basic STP/RSTP functions on a switching device, set the working mode to STP or RSTP. RSTP is compatible with STP.
  • Page 202: Optional) Configuring The Path Cost For A Port

    In the Huawei proprietary calculation method for example, the link rate determines the recommended value for the path cost.
  • Page 203: Optional) Configuring Port Priorities

    A path cost is set for the interface. l When the Huawei proprietary calculation method is used, cost ranges from 1 to 200000. l When the IEEE 802.1d standard method is used, cost ranges from 1 to 65535.
  • Page 204: Enabling Stp/Rstp

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 7 STP/RSTP Configuration Step 2 Run: interface interface-type interface-number The view of the Ethernet interface participating in STP calculation is displayed. Step 3 Run: stp port priority priority The port priority is configured.
  • Page 205: Configuring Stp/Rstp Parameters On An Interface

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 7 STP/RSTP Configuration Example Run the display stp command to view the spanning-tree working mode, root bridge, priority of the root bridge, convergence mode, path cost calculation method, and path cost of the root port.
  • Page 206 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 7 STP/RSTP Configuration convergence. RSTP is a refinement of STP and implements rapid convergence. In addition to the preceding parameters, the link type, rapid transition mechanism, and maximum number of sent BPDUs also affect STP/RSTP topology convergence.
  • Page 207: Establishing The Configuration Task

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 7 STP/RSTP Configuration Paramete Description Commands Remarks Port transition l stp mcheck On a switching device to the RSTP running RSTP, if an mode interface is connected to a device running STP, the...
  • Page 208: Configuring System Parameters

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 7 STP/RSTP Configuration Applicable Environment On some specific networks, proper RSTP parameter settings will help implement rapid network convergence. NOTE The default configurations for the parameters described in this section help implement RSTP rapid convergence.
  • Page 209 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 7 STP/RSTP Configuration Step 2 Run: stp bridge-diameter diameter The network diameter is configured. By default, the network diameter is 7. l RSTP uses a single spanning tree instance on the entire network. As a result, performance deterioration cannot be prevented when the network scale grows.
  • Page 210: Configuring Port Parameters

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 7 STP/RSTP Configuration The default Max Age timer of a switching device is 2000 centiseconds. NOTE The values of the Hello timer, Forward Delay timer, and Max Age timer must comply with the following formulas;...
  • Page 211 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 7 STP/RSTP Configuration NOTE If you run the stp mcheck command in the system view, the MCheck operation is performed on all the interfaces. Step 5 Run: stp transmit-limit packet-number The maximum number of BPDUs sent by a port within each Hello time is set.
  • Page 212: Checking The Configuration

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 7 STP/RSTP Configuration In normal mode, ARP entries to be updated are rapidly aged. The remaining lifetime of ARP entries to be updated is set to 0. The switching device rapidly processes these aged entries.
  • Page 213: Configuring Rstp Protection Functions

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 7 STP/RSTP Configuration 7.5 Configuring RSTP Protection Functions This section describes how to configure RSTP protection functions. You can configure one or more functions. 7.5.1 Establishing the Configuration Task Before configuring RSTP protection functions, familiarize yourself with the applicable environment, complete the pre-configuration tasks, and obtain the required data.
  • Page 214 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 7 STP/RSTP Configuration Protection Scenario Configuration Impact Function Root Due to incorrect If a designated port is enabled with the root protection configurations or malicious protection function, the role of the port cannot attacks on the network, a be changed.
  • Page 215: Configuring Bpdu Protection On A Switching Device

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 7 STP/RSTP Configuration 7.5.2 Configuring BPDU Protection on a Switching Device After BPDU protection is enabled, a switching device shuts down an edge port if the edge port receives a BPDU, and notifies the NMS of the shutdown event.
  • Page 216: Configuring Root Protection On A Port

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 7 STP/RSTP Configuration Context Attackers may send pseudo TC BPDUs to attack switching devices. Switching devices receive a large number of TC BPDUs in a short time and delete entries frequently, which burdens system processing and degrades network stability.
  • Page 217: Configuring Loop Protection On A Port

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 7 STP/RSTP Configuration Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: interface interface-type interface-number The Ethernet interface view is displayed. Step 3 Run: stp root-protection Root protection is enabled on the interface.
  • Page 218: Checking The Configuration

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 7 STP/RSTP Configuration The Ethernet interface view is displayed. Step 3 Run: stp loop-protection Loop protection for the root port or the alternate port is configured on the switching device. By default, loop protection is disabled.
  • Page 219: Clearing Stp/Rstp Statistics

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 7 STP/RSTP Configuration 7.6.1 Clearing STP/RSTP Statistics You can run the reset commands to clear STP/RSTP statistics. Context CAUTION STP/RSTP statistics cannot be restored after being cleared. Procedure Step 1 Run the reset stp [ interface interface-type interface-number ] statistics command to clear spanning-tree statistics.
  • Page 220 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 7 STP/RSTP Configuration Figure 7-3 Networking diagram of basic STP configurations Network Root Bridge RouterA Eth2/0/0 Eth2/0/1 Eth0/0/1 Eth0/0/1 SwitchB SwitchA Eth0/0/2 Eth0/0/2 Eth0/0/1 Eth0/0/1 SwitchD SwitchC Eth0/0/3 Eth0/0/2 Eth0/0/2 Eth0/0/3...
  • Page 221 # Configure the STP mode on SwitchA, SwitchB, SwitchC and SwitchD. NOTE l Huawei 2300 Series Switch is used in this example. If other types of switches are used, refer to the documentation of the switches. Configure primary and secondary root bridges.
  • Page 222 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 7 STP/RSTP Configuration # Enable STP on RouterA Ethernet2/0/0 and Ethernet2/0/1. [RouterA] interface ethernet 2/0/0 [RouterA-Ethernet2/0/0] stp enable [RouterA-Ethernet2/0/0] quit [RouterA] interface ethernet 2/0/1 [RouterA-Ethernet2/0/1] stp enable [RouterA-Ethernet2/0/1] quit Enable STP on all the interfaces except the interfaces connected to terminals for SwitchA, SwitchB, SwitchC and SwitchD.
  • Page 223: Example For Configuring Basic Rstp Functions

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 7 STP/RSTP Configuration stp mode stp pathcost-standard legacy interface Ethernet0/0/1 interface Ethernet0/0/2 interface Ethernet0/0/3 return Configuration file of SwitchC stp mode stp pathcost-standard legacy interface Ethernet0/0/1 interface Ethernet0/0/2 stp disable interface Ethernet0/0/3...
  • Page 224 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 7 STP/RSTP Configuration RSTP can be deployed on a network to eliminate loops by blocking some ports. On the network shown in Figure 7-4, after RouterA, SwitchA, SwitchB, SwitchC and SwitchD running RSTP discover loops on the network by exchanging information with each other, they trim the ring topology into a loop-free tree topology by blocking an interface.
  • Page 225 # Configure the RSTP mode on SwitchA, SwitchB, SwitchC and SwitchD. NOTE l Huawei 2300 Series Switch is used in this example. If other types of switches are used, refer to the documentation of the switches. Configure primary and secondary root bridges.
  • Page 226 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 7 STP/RSTP Configuration # Disable RSTP on interfaces connected to terminals for SwitchC and SwitchD. l Enable RSTP globally. # Enable RSTP globally on RouterA. [RouterA] stp enable # Enable RSTP globally on other switching devices.
  • Page 227 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 7 STP/RSTP Configuration stp root- protection interface Ethernet2/0/1 stp root- protection return Configuration file of SwitchA stp mode rstp stp instance 0 root secondary stp pathcost-standard legacy interface Ethernet0/0/1 interface Ethernet0/0/2...
  • Page 228 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 7 STP/RSTP Configuration interface Ethernet0/0/3 stp disable interface Ethernet0/0/4 stp instance 0 cost 200000 return Issue 02 (2012-03-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 229: Mstp Configuration

    8.6 Configuring MSTP Interoperability Between Huawei Devices and Non-Huawei Devices To enable Huawei devices to work with non-Huawei devices on an MSTP-capable network, configure the BPDU format, MSTP protocol packet format, and digest snooping function on the Huawei devices.
  • Page 230 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 8 MSTP Configuration This section describes the networking requirements, configuration roadmap, data preparation, and procedures for some typical application scenarios for MSTP, and also provides the related configuration files. Issue 02 (2012-03-30) Huawei Proprietary and Confidential Copyright ©...
  • Page 231: Mstp Introduction

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 8 MSTP Configuration 8.1 MSTP Introduction The Multiple Spanning Tree Protocol (MSTP) incorporates the functions of the Spanning Tree Protocol (STP) and Rapid Spanning Tree Protocol (RSTP), and outperforms them. It enables rapid convergence and provides load balancing across redundant paths.
  • Page 232 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 8 MSTP Configuration Spanning Tree Characteristics Application Precautions Protocols Scenarios STP/ MSTP l Ensures a loop-free tree User or service- RSTP topology that helps specific load Configurati prevent broadcast storms balancing is required.
  • Page 233 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 8 MSTP Configuration MSTI 1 uses S4 as the root switching device to forward packets of VLAN 2. MSTI 2 uses S6 as the root switching device to forward packets of VLAN 3.
  • Page 234: Mst Region

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 8 MSTP Configuration – VLAN 1 is mapped to MSTI 1. – VLAN 2 and VLAN 3 are mapped to MSTI 2. – Other VLANs are mapped to MSTI 0. Regional root Regional roots are classified into Internal Spanning Tree (IST) and MSTI regional roots.
  • Page 235 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 8 MSTP Configuration Figure 8-4 MSTP network CIST Root Region Root Region Root Region Root A Common Spanning Tree (CST) connects all the MST regions on a switching network. Each MST region can be considered a node. A CST is calculated by using STP or RSTP based on all the nodes.
  • Page 236 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 8 MSTP Configuration – An MST region has only one switching device. As shown in Figure 8-4, the switching device in B0 is an SST. Port roles Compared with RSTP which defined root ports, designated ports, alternate ports, backup ports, and edge ports, MSTP has two additional port types: master ports and regional edge ports.
  • Page 237 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 8 MSTP Configuration Port Description Roles Regional A regional edge port is located at the edge of an MST region and connects edge port to another MST region or an SST.
  • Page 238: Mstp Features Supported By The Ar3200

    8.2 MSTP Features Supported by the AR3200 Before configuring MSTP, familiarize yourself with the concepts of basic MSTP functions, topology convergence, MSTP protection, and MSTP interoperability between Huawei devices and non-Huawei devices. MSTP is used to block redundant links on the Layer 2 network and trim a network into a loop- free tree.
  • Page 239 Proposal/Agreement mechanism to implement rapid convergence. Protection functions listed in Table 8-5. MSTP interoperability between Huawei devices and non-Huawei devices. Certain parameters must be set on Huawei devices to ensure uninterrupted communication. Table 8-5 MSTP protection MSTP Scenario Configuration Impact...
  • Page 240: Configuring Basic Mstp Functions

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 8 MSTP Configuration MSTP Scenario Configuration Impact Protection Root Due to incorrect To address this issue, the root protection protection configurations or malicious function can be configured to protect the root...
  • Page 241: Establishing The Configuration Task

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 8 MSTP Configuration of the path from the port to the root bridge and the less likely that the port becomes a root port. Set a priority for a port in an MSTI: The lower the numerical value, the more likely the port becomes a designated port;...
  • Page 242 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 8 MSTP Configuration Figure 8-6 Networking diagram of basic MSTP configurations Network MST Region Eth2/0/2 Eth2/0/2 Eth2/0/1 Eth2/0/1 Eth2/0/3 Eth2/0/3 Eth2/0/2 Eth2/0/2 Eth2/0/1 Eth2/0/1 VLAN1~10 MSTI1 VLAN11~20 MSTI2 MSTI1: Root Switch:S1...
  • Page 243: Configuring The Mstp Mode

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 8 MSTP Configuration Connecting interfaces and setting physical parameters for the interfaces to ensure that the interfaces are physically Up Data Preparation To configure basic MSTP functions, you need the following data.
  • Page 244 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 8 MSTP Configuration Context An MST region contains multiple switching devices and network segments. These switching devices are directly connected and have the same region name, same VLAN-to-instance mapping, and the same configuration revision number after MSTP is enabled. One switching network can have multiple MST regions.
  • Page 245: Optional) Configuring A Priority For A Switching Device In An Msti

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 8 MSTP Configuration NOTE l The VLAN-to-instance mappings generated using the vlan-mapping modulo modulo commands cannot meet network requirements. It is recommended that you run the instance instance-id vlan { vlan-id1 [ to vlan-id2 ] }&<1-10> command to configure VLAN-to-instance mappings.
  • Page 246: Optional) Configuring A Path Cost Of A Port In An Msti

    MSTIs, VLAN traffic can be transmitted along different physical links for load balancing. In the Huawei proprietary calculation method for example, the link rate determines the recommended value for the path cost. The following table lists the recommended path costs for ports with different link rates.
  • Page 247: Optional) Configuring A Port Priority In An Msti

    A path cost is set for the port in the current MSTI. l When the Huawei proprietary calculation method is used, cost ranges from 1 to 200000. l When the IEEE 802.1d standard method is used, cost ranges from 1 to 65535.
  • Page 248: Enabling Mstp

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 8 MSTP Configuration Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: interface interface-type interface-number The view of the Ethernet interface participating in STP calculation is displayed.
  • Page 249 Run the display stp command to view the spanning-tree working mode, priorities of switching devices, path cost calculation method, and path cost of a root port. For example: <Huawei> display stp instance 0 interface ethernet 2/0/1 -------[CIST Global Info][ Mode MSTP ]------- CIST Bridge :32768.00e0-fc0e-a421...
  • Page 250: Configuring Mstp Parameters On An Interface

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 8 MSTP Configuration <Huawei> display stp region-configuration digest Oper Configuration Format selector :0 Region name :huawei Revision level Digest :0x5F762D9A46311EFFB7A488A3267FCA9F 8.4 Configuring MSTP Parameters on an Interface Proper MSTP parameter settings achieve rapid convergence.
  • Page 251: Configuring System Parameters

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 8 MSTP Configuration Data Whether the edge port needs to be enabled to go Up automatically after being shut down Whether the port needs to clear the spanning tree statistics Whether the edge port needs to be configured as a BPDU filter 8.4.2 Configuring System Parameters...
  • Page 252 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 8 MSTP Configuration l To configure all ports on the devices as BPDU filter ports, run: stp bpdu-filter default By default, a port is a non-BPDU filter port. After ports on a network edge device are configured as BPDU filter ports, the ports no longer process or send BPDUs.
  • Page 253: Configuring Port Parameters

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 8 MSTP Configuration NOTE If you run the stp mcheck command in the system view, the MCheck operation is performed on all the interfaces. ----End 8.4.3 Configuring Port Parameters Port parameters that may affect MSTP topology convergence include the link type and maximum number of sent BPDUs.
  • Page 254 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 8 MSTP Configuration Step 6 (Optional) Run: stp edged-port enable The port is configured as an edge port. If a device port is connected to a terminal, you can run this command to configure the port as an edge port.
  • Page 255: Checking The Configuration

    Hello time interval. You can also check whether the link connected to the port is a P2P link. For example: <Huawei> display stp instance 0 interface ethernet 2/0/1 -------[CIST Global Info][ Mode MSTP ]------- CIST Bridge :32768.00e0-fc0e-a421...
  • Page 256: Establishing The Configuration Task

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 8 MSTP Configuration 8.5.1 Establishing the Configuration Task Before configuring MSTP protection functions, familiarize yourself with the applicable environment, complete the pre-configuration tasks, and obtain the required data. This will help you complete the configuration task quickly and accurately.
  • Page 257 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 8 MSTP Configuration MSTP Scenario Configuration Impact Protection Root Due to incorrect To address this issue, the root protection protection configurations or malicious function can be configured to protect the root...
  • Page 258: Configuring Bpdu Protection On A Switching Device

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 8 MSTP Configuration Data Number of the port on which root protection is to be enabled Number of the port on which loop protection is to be enabled 8.5.2 Configuring BPDU Protection on a Switching Device After BPDU protection is enabled on a switching device, the switching device shuts down an edge port if the edge port receives a BPDU, and notifies the NMS of the shutdown event.
  • Page 259: Configuring Tc Protection On A Switching Device

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 8 MSTP Configuration 8.5.3 Configuring TC Protection on a Switching Device After TC protection is enabled, you can set the number of times an MSTP process processes TC BPDUs within a given time. TC protection avoids frequent deletion of MAC address entries and ARP entries, thereby protecting switching devices.
  • Page 260: Configuring Loop Protection On An Interface

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 8 MSTP Configuration over low-speed links, leading to network congestion. The root protection function on a switching device is used to protect the root bridge by preserving the role of the designated port.
  • Page 261: Checking The Configuration

    ----End Example Run the display stp command to view the BPDU protection status and configured protection type on a switching device. For example: <Huawei> display stp instance 0 interface ethernet 2/0/1 -------[CIST Global Info][Mode MSTP]------- CIST Bridge :32768.00e0-fc0e-a421 Config Times...
  • Page 262: Configuring Mstp Interoperability Between Huawei Devices And Non-Huawei Devices

    TCN: 0, Config: 0, RST: 0, MST: 3 8.6 Configuring MSTP Interoperability Between Huawei Devices and Non-Huawei Devices To enable Huawei devices to work with non-Huawei devices on an MSTP-capable network, configure the BPDU format, MSTP protocol packet format, and digest snooping function on the Huawei devices.
  • Page 263 After receiving the message, the upstream device sets the port connected to the downstream device as a designated port. The designated port then transitions to the Forwarding state. When Huawei devices are connected to non-Huawei devices, select the same mode as that used on non-Huawei devices. Procedure...
  • Page 264: Configuring The Mstp Protocol Packet Format On An Interface

    Interconnected Huawei and non-Huawei devices cannot communicate with each other if they have the same region name, revision number, and VLAN-to-instance mappings but different BPDU keys. To address this problem, enable the digest snooping function on the Huawei device. Context Perform the following steps on a switching device in an MST region to enable the digest snooping function.
  • Page 265: Checking The Configuration

    The digest snooping function is enabled. ----End 8.6.5 Checking the Configuration After MSTP parameters are configured for the interoperability between Huawei devices and non-Huawei devices, you can verify the configurations. Prerequisites All the configurations for the interoperability between Huawei devices and non-Huawei devices are complete.
  • Page 266: Maintaining Mstp

    Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 8 MSTP Configuration Run the display this command in the view of the interface participating in STP calculation to view the fast transition mechanism configured on the interface. Use the following command...
  • Page 267 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 8 MSTP Configuration Loops will cause broadcast storms, thereby exhausting network resources and paralyzing the network. Loops also cause flapping of MAC address tables and damages MAC address entries. MSTP can be deployed to eliminate loops. MSTP blocks redundant links on a Layer 2 network and trims the network into a loop-free tree.
  • Page 268 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 8 MSTP Configuration Figure 8-7 Networking diagram of configuring basic MSTP functions Network RouterA Region Eth2/0/0 Eth2/0/1 Eth0/0/1 Eth0/0/1 SwitchA SwitchB Eth0/0/2 Eth0/0/2 Eth0/0/1 Eth0/0/1 SwitchC SwitchD Eth0/0/2 Eth0/0/3 Eth0/0/3 Eth0/0/2...
  • Page 269 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 8 MSTP Configuration Configuration Roadmap The configuration roadmap is as follows: Configure basic MSTP functions, including: Configure the MSTP mode for the ring network. Configure an MST region and create multiple MSTIs to implement load balancing.
  • Page 270 200000. l If the switches are not Huawei 2300 Series, all switches on a network must use the same path cost calculation method. Refer to STP List of path costs to get standard of other calculation methods.
  • Page 271 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 8 MSTP Configuration [RouterA] interface ethernet 2/0/0 [RouterA-Ethernet2/0/0] stp enable [RouterA-Ethernet2/0/0] quit [RouterA] interface ethernet 2/0/1 [RouterA-Ethernet2/0/1] stp enable [RouterA-Ethernet2/0/1] quit # As shown in Figure 8-7, Enable MSTP on all interfaces except the interfaces connected to terminals, for SwitchA, SwitchB, SwitchC and SwitchD.
  • Page 272 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 8 MSTP Configuration In MSTI1, after RouterA is configured as a root bridge, RouterA Eth2/0/0 and Eth2/0/1 are elected as designated ports during spanning tree calculation. In MSTI2, after RouterA is configured as a root bridge, RouterA Eth2/0/0 and Eth2/0/1 are elected as designated ports during spanning tree calculation.
  • Page 273 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 8 MSTP Configuration stp root- protection return Configuration file of SwitchA sysname SwitchA vlan batch 2 to stp instance 1 root secondary stp pathcost-standard legacy stp region- configuration region-name instance 1 vlan 2 to...
  • Page 274 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 8 MSTP Configuration interface Ethernet0/0/1 port link-type trunk port trunk allow-pass vlan 2 to interface Ethernet0/0/2 port link-type trunk port trunk allow-pass vlan 2 to interface Ethernet0/0/3 port link-type trunk port trunk allow-pass vlan 2 to...
  • Page 275 Huawei AR3200 Series Enterprise Routers Configuration Guide - LAN 8 MSTP Configuration vlan batch 11 to stp pathcost-standard legacy stp region- configuration region-name instance 1 vlan 2 to instance 2 vlan 11 to active region- configuration interface Ethernet0/0/1 port link-type trunk...

Table of Contents