Configuring Digest Snooping; Configuration Restrictions And Guidelines; Configuration Procedure - H3C S3600V2 SERIES Layer 2-Lan Switching Configuration Manual

Step
3. Perform mCheck.
NOTE:
An mCheck operation takes effect on a device that operates in MSTP, RSTP, or PVST mode.

Configuring Digest Snooping

As defined in IEEE 802.1s, connected devices are in the same region only when their MST region-related
configurations (region name, revision level, and VLAN-to-instance mappings) are identical. A spanning
tree device identifies devices in the same MST region by determining the configuration ID in BPDU
packets. The configuration ID includes the region name, revision level, and configuration digest, which is
in 16-byte length and is the result calculated by using the HMAC-MD5 algorithm based on
VLAN-to-instance mappings.
Spanning tree implementations vary with vendors, and the configuration digests calculated using private
keys is different, so devices of different vendors in the same MST region cannot communicate with each
other.
To enable communication between an H3C device and a third-party device, enable the Digest Snooping
feature on the port that connects the H3C device to the third-party device in the same MST region.

Configuration restrictions and guidelines

Before you enable Digest Snooping, make sure that associated devices of different vendors are
•
connected and run spanning tree protocols.
• With digest snooping enabled, in-the-same-region verification does not require comparison of
configuration digest, so the VLAN-to-instance mappings must be the same on associated ports.
With global Digest Snooping enabled, modification of VLAN-to-instance mappings and removal of
•
the current region configuration by using the undo stp region-configuration command are not
allowed. You can modify only the region name and revision level.
To make Digest Snooping take effect, you must enable it both globally and on associated ports. To
•
make the configuration effective on all configured ports and while reducing impact on the network,
enable Digest Snooping on all associated ports first and then globally.
To prevent loops, do not enable Digest Snooping on MST region edge ports.
•
H3C recommends you to enable Digest Snooping first and then the spanning tree feature. To avoid
•
causing traffic interruption, do not configure Digest Snooping when the network is already working
well.

Configuration procedure

You can enable Digest Snooping only on the H3C device that is connected to a third-party device that
uses its private key to calculate the configuration digest.
To configure Digest Snooping:
Step
1. Enter system view.
Command
system-view
93
Command
stp mcheck
Remarks
N/A