Example For Configuring Security Features For An Hgmp Cluster - Huawei Quidway S5700 Series Configuration Manual - Network Management

Quidway S5700 Series Ethernet Switches
Configuration Guide - Network Management
l
3.6.10 Example for Configuring Security Features for an HGMP
Cluster
Networking Requirements
As shown in
is the administrator switch of the cluster and other switches are member switches. The member
ID of Member-2 is 2 and the member ID of Member-3 is 3.
Disable NDP and NTDP on the interfaces of all the member switches that do not need NDP or
NTDP. To perform the action and improve the security of the cluster, you can configure security
features for the HGMP cluster.
Issue 01 (2011-10-26)
ndp enable
#
cluster
mngvlanid 10
administrator-address 0001-0001-0001 name HUAWEI
#
return
Configuration file of Member-3.
#
sysname Member-3
#
vlan batch 10
#
cluster enable
ntdp enable
ntdp hop 5
ntdp timer 10
ndp enable
#
interface Vlanif10
#
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 10
ntdp enable
ndp enable
#
cluster
mngvlanid 10
administrator-address 0001-0001-0001 name HUAWEI
#
return
Figure 3-12, all the Layer 2 switches belong to the same cluster. Administrator-1
NOTE
After NDP or NTDP is disabled on unrelated interfaces of member switches, if the new candidate switches
are connected to these unrelated interfaces, they cannot join the cluster until NDP or NTDP is enabled.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
3 HGMP Configuration
198