Performing mCheck ························································································································································ 92
Performing mCheck globally ································································································································ 92
Configuring Digest Snooping ······································································································································· 93
Configuration procedure ······································································································································ 93
Configuring No Agreement Check ······························································································································ 95
Configuration prerequisites ·································································································································· 96
Configuration procedure ······································································································································ 96
Configuring TC snooping ·············································································································································· 97
Configuration procedure ······································································································································ 98
Configuring protection functions ·································································································································· 98
Configuration prerequisites ·································································································································· 98
Enabling BPDU guard ··········································································································································· 98
Enabling root guard ·············································································································································· 99
Enabling loop guard ··········································································································································· 100
Enabling TC-BPDU guard···································································································································· 101
Enabling BPDU drop ··········································································································································· 101
MSTP configuration example ····························································································································· 102
PVST configuration example ······························································································································ 106
Configuring BPDU tunneling ··································································································································· 110
Overview ······································································································································································· 110
Background ·························································································································································· 110
BPDU tunneling implementation ························································································································· 111
Enabling BPDU tunneling ············································································································································ 112
Configuration prerequisites ································································································································ 112
Configuration procedure ···································································································································· 113
Configuring VLANs ················································································································································· 117
Overview ······································································································································································· 117
VLAN fundamentals············································································································································· 117
VLAN types ·························································································································································· 118
Protocols and standards ····································································································································· 119
Configuring basic VLAN settings································································································································ 119
Configuration procedure ···································································································································· 119
Configuration procedure ···································································································································· 120
Configuring port-based VLANs ··································································································································· 122
Introduction to port-based VLAN ······················································································································· 122
iv