Configuring Protected Vlans - HPE FlexFabric 5700 Series Configuration Manual

Follow these guidelines when you configure control VLANs:
•
Do not configure the default VLAN of a port accessing an RRPP ring as the control VLAN, and
do not enable QinQ or VLAN mapping on control VLANs. If you do, RRPPDUs cannot be
correctly forwarded.
•
After you configure RRPP rings for an RRPP domain, you cannot delete or modify the primary
control VLAN of the domain. You can only use the undo control-vlan command to delete a
primary control VLAN.
•
To transparently transmit RRPPDUs on a device not configured with RRPP, make sure only the
two ports accessing the RRPP ring permit packets from the control VLANs. Otherwise, the
packets from other VLANs might enter the control VLANs in transparent transmission mode and
strike the RRPP ring.
Perform this task on all nodes in the RRPP domain to be configured.
To configure control VLANs:
Step
1. Enter system view.
2. Enter RRPP domain view.
3. Configure the primary control
VLAN for the RRPP domain.

Configuring protected VLANs

Before you configure RRPP rings in an RRPP domain, configure the same protected VLANs for all
nodes in the RRPP domain. All VLANs to which the RRPP ports are assigned must be protected by
the RRPP domains.
Protected VLANs are configured by referencing Multiple Spanning Tree Instances (MSTIs). The
protected VLAN configuration method varies by the spanning tree mode:
•
In STP, RSTP, or MSTP mode, you must manually configure the mappings between VLANs and
MSTIs.
•
In PVST mode, the device automatically maps each VLAN to an MSTI. When the spanning tree
protocol is disabled globally, all VLANs are automatically mapped to MSTI 0.
For more information about spanning tree, see Layer 2—LAN Switching Configuration Guide.
IMPORTANT:
When you configure load balancing, you must configure different protected VLANs for different
RRPP domains.
Perform this task on all nodes in the RRPP domain to be configured.
To configure protected VLANs:
Step
1. Enter system view.
2. Enter MST region view.
Command
system-view
rrpp domain domain-id
control-vlan vlan-id
Command
system-view
stp region-configuration
53
Remarks
N/A
N/A
By default, no control VLAN
exists in the RRPP domain.
Remarks
N/A
Not required if the device is
operating in PVST mode.
For more information about the
command, see Layer 2—LAN
Switching Command Reference.