H3C S12500X-AF Series Configuration Manual
H3C S12500X-AF Series Configuration Manual

H3C S12500X-AF Series Configuration Manual

Layer 2-lan switching
Hide thumbs Also See for S12500X-AF Series:
Table of Contents

Advertisement

H3C S12500X-AF Switch Series
Layer 2—LAN Switching Configuration Guide
New H3C Technologies Co., Ltd.
http://www.h3c.com
Software version: Release 2609 and later
Document version: 6W102-20181204

Advertisement

Table of Contents
loading

Summary of Contents for H3C S12500X-AF Series

  • Page 1 H3C S12500X-AF Switch Series Layer 2—LAN Switching Configuration Guide New H3C Technologies Co., Ltd. http://www.h3c.com Software version: Release 2609 and later Document version: 6W102-20181204...
  • Page 2 The information in this document is subject to change without notice. All contents in this document, including statements, information, and recommendations, are believed to be accurate, but they are presented without warranty of any kind, express or implied. H3C shall not be liable for technical or editorial errors or omissions contained herein.
  • Page 3 Preface This configuration guide describes the Layer 2—LAN switching fundamentals and configuration procedures. It covers the following features and tasks: • Flow control and load sharing. • User isolation in the same VLAN and VLAN configuration. • Layer 2 loop elimination. This preface includes the following topics about the documentation: •...
  • Page 4 Convention Description example, the New User window appears; click OK. Multi-level menus are separated by angle brackets. For example, File > Create > > Folder. Symbols Convention Description An alert that calls attention to important information that if not understood or followed WARNING! can result in personal injury.
  • Page 5 It is normal that the port numbers, sample output, screenshots, and other information in the examples differ from what you have on your device. Documentation feedback You can e-mail your comments about product documentation to info@h3c.com. We appreciate your comments.
  • Page 6: Table Of Contents

    Contents Configuring Ethernet interfaces ··························································· 1   Ethernet interface naming conventions ··························································································· 1   Configuring a management Ethernet interface ·················································································· 1   Configuring common Ethernet interface settings ··············································································· 1   Splitting a 40-GE interface and combining 10-GE breakout interfaces ············································· 2  ...
  • Page 7 Configuration procedure ····································································································· 31   Verifying the configuration ··································································································· 31   Configuring MAC Information ···························································· 33   Enabling MAC Information ········································································································· 33   Configuring the MAC Information mode ························································································ 33   Setting the MAC change notification interval ·················································································· 34   Setting the MAC Information queue length ····················································································...
  • Page 8 Configuring port isolation ································································· 72   Assigning a port to an isolation group ··························································································· 72   Displaying and maintaining port isolation ······················································································· 72   Port isolation configuration example ····························································································· 73   Network requirements ········································································································ 73   Configuration procedure ····································································································· 73  ...
  • Page 9 Enabling the spanning tree feature ···························································································· 111   Enabling the spanning tree feature in STP/RSTP/MSTP mode ·················································· 111   Enabling the spanning tree feature in PVST mode ·································································· 111   Performing mCheck ················································································································ 112   Configuration restrictions and guidelines ·············································································· 112  ...
  • Page 10 Configuring port-based VLANs ·································································································· 142   Introduction ···················································································································· 142   Assigning an access port to a VLAN ···················································································· 143   Assigning a trunk port to a VLAN ························································································ 143   Assigning a hybrid port to a VLAN ······················································································· 144   Displaying and maintaining VLANs ····························································································...
  • Page 11 Configuring service loopback groups ················································ 190   Configuration procedure ·········································································································· 190   Displaying and maintaining service loopback groups ····································································· 190   Service loopback group configuration example ············································································· 191   Network requirements ······································································································ 191   Configuration procedure ··································································································· 191   Index ························································································· 192  ...
  • Page 12: Configuring Ethernet Interfaces

    Configuring Ethernet interfaces The Switch Series supports Ethernet interfaces, management Ethernet interfaces, Console interfaces, and USB interfaces. For the interface types and the number of interfaces supported by a switch model, see the installation guide. This chapter describes how to configure management Ethernet interfaces and Ethernet interfaces. Ethernet interface naming conventions For a switch in an IRF fabric, its Ethernet interfaces are numbered in the format of interface type A/B/C/D.
  • Page 13: Splitting A 40-Ge Interface And Combining 10-Ge Breakout Interfaces

    Splitting a 40-GE interface and combining 10-GE breakout interfaces Configuration restrictions and guidelines All interfaces on the LSXM1CGQ6QGHB1, LSXM1CGQ18QGHB1, LSXM1CGQ18QGHF1, and LSXM1CGQ36HB1 interface modules can be split into four breakout interfaces. 100-GE interfaces on the LSXM1TGS48C2HB1 interface modules cannot be split into four breakout interfaces.
  • Page 14: Configuring Basic Settings Of An Ethernet Interface Or Subinterface

    Step Command Remarks Enter system view. system-view Enter the view of any 10-GE interface interface-type breakout interface. interface-number Combine the four 10-GE By default, a 10-GE breakout breakout interfaces into a interface operates as a single using fortygige 40-GE interface. interface.
  • Page 15: Configuring The Link Mode Of An Ethernet Interface

    Step Command Remarks Create Ethernet interface interface-type subinterface. interface-number.subnumber default setting Set the description for the interface-name Interface. description text Ethernet subinterface. example, HundredGigE1/0/1.1 Interface. Restore the default settings default for the Ethernet subinterface. default, expected Set the expected bandwidth bandwidth kbps) bandwidth bandwidth-value...
  • Page 16: Configuring Physical State Change Suppression On An Ethernet Interface

    Processes jumbo frames within the specified length. Discards jumbo frames that exceed the specified length. To configure jumbo frame support in interface view: Step Command Remarks Enter system view. system-view Enter Ethernet interface interface interface-type view. interface-number By default, the switch allows jumbo Configure jumbo frame...
  • Page 17: Configuring Dampening On An Ethernet Interface

    Configuring dampening on an Ethernet interface The interface dampening feature uses an exponential decay mechanism to prevent excessive interface flapping events from adversely affecting routing protocols and routing tables in the network. Suppressing interface state change events protects the system resources. If an interface is not dampened, its state changes are reported.
  • Page 18: Enabling Loopback Testing On An Ethernet Interface

    Figure 1 Change rule of the penalty value Configuration restrictions and guidelines When you configure dampening on an Ethernet interface, follow these restrictions and guidelines: • The dampening command and the link-delay command cannot be configured together on an interface. •...
  • Page 19: Configuring Generic Flow Control On An Ethernet Interface

    Loopback testing includes the following types: • Internal loopback testing—Tests the device where the Ethernet interface resides. The Ethernet interface sends outgoing packets back to the local device. If the device fails to receive the packets, the device fails. • External loopback testing—Tests the inter-device link.
  • Page 20: Configuring Pfc On An Ethernet Interface

    To enable generic flow control on an Ethernet interface: Step Command Remarks Enter system view. system-view Enter Ethernet interface interface interface-type view. interface-number • Enable TxRx-mode generic flow control: flow-control Enable generic flow By default, generic flow control is • Enable Rx-mode generic control.
  • Page 21: Setting The Statistics Polling Interval

    • If you configure the flow control or flow-control receive enable command on a PFC-enabled interface, the following rules apply: The PFC configuration takes effect. The configuration of the flow control or flow-control receive enable command is ignored. The flow control or flow-control receive enable command takes effect on the interface only when PFC is disabled on it.
  • Page 22: Configuring A Layer 2 Ethernet Interface

    • When you configure the suppression threshold in kbps, the actual suppression threshold might be different from the configured one as follows: If the configured value is smaller than 64, the value of 64 takes effect. If the configured value is greater than 64 but not an integer multiple of 64, the integer multiple of 64 that is greater than and closest to the configured value takes effect.
  • Page 23: Forcibly Bringing Up A Fiber Port

    Both storm suppression and storm control can suppress storms on an interface. Storm suppression uses the chip to suppress traffic. Storm suppression has less impact on the device performance than storm control, which uses software to suppress traffic. Storm control uses a complete polling cycle to collect traffic data, and analyzes the data in the next cycle.
  • Page 24 present for the fiber port. When one fiber link is present and up, the fiber port can forward packets over the link unidirectionally. Figure 2 Forcibly bring up a fiber port When Ethernet interfaces Correct fiber When Ethernet interfaces cannot be or are not forcibly connection are forcibly brought up brought up...
  • Page 25: Configuring A Layer 3 Ethernet Interface Or Subinterface

    Configuring a Layer 3 Ethernet interface or subinterface Setting the MTU for an Ethernet interface or subinterface The maximum transmission unit (MTU) of an Ethernet interface affects the fragmentation and reassembly of IP packets on the interface. Typically, you do not need to modify the MTU of an interface.
  • Page 26 Task Command (In standalone mode.) Clear the Ethernet reset ethernet statistics [ slot slot-number ] module statistics. (In IRF mode.) Clear the Ethernet reset ethernet statistics [ chassis chassis-number slot module statistics. slot-number ]...
  • Page 27: Configuring Loopback, Null, And Inloopback Interfaces

    Configuring loopback, null, and inloopback interfaces This chapter describes how to configure a loopback interface, a null interface, and an inloopback interface. Configuring a loopback interface A loopback interface is a virtual interface. The physical layer state of a loopback interface is always up unless the loopback interface is manually shut down.
  • Page 28: Configuring An Inloopback Interface

    applying an ACL. For example, if you specify a null interface as the next hop of a static route to a network segment, any packets routed to the network segment are dropped. To configure a null interface: Step Command Remarks Enter system view.
  • Page 29: Bulk Configuring Interfaces

    Bulk configuring interfaces You can enter interface range view to bulk configure multiple interfaces with the same feature instead of configuring them one by one. For example, you can execute the shutdown command in interface range view to shut down a range of interfaces. Configuration restrictions and guidelines When you bulk configure interfaces in interface range view, follow these restrictions and guidelines: •...
  • Page 30: Displaying And Maintaining Bulk Interface Configuration

    Step Command Remarks • interface range name name [ interface { interface-type interface-number interface-type interface-number ] } &<1-24> ] (Optional.) Display commands available for Enter a question mark (?) at the the first interface in the interface range prompt. interface range. available Available commands depend on commands to configure...
  • Page 31: Configuring The Mac Address Table

    Configuring the MAC address table Overview An Ethernet device uses a MAC address table to forward frames. A MAC address entry includes a destination MAC address, an outgoing interface, and a VLAN ID. When the device receives a frame, it uses the destination MAC address of the frame to look for a match in the MAC address table. •...
  • Page 32: Mac Address Table Configuration Task List

    • Static entries—A static entry is manually added to forward frames with a specific destination MAC address out of the associated interface, and it never ages out. A static entry has higher priority than a dynamically learned one. • Dynamic entries—A dynamic entry can be manually configured or dynamically learned to forward frames with a specific destination MAC address out of the associated interface.
  • Page 33: Configuring Mac Address Entries

    Configuring MAC address entries Configuration guidelines • You cannot add a dynamic MAC address entry if a learned entry already exists with a different outgoing interface for the MAC address. • The manually configured static, blackhole, and multiport unicast MAC address entries cannot survive a reboot if you do not save the configuration.
  • Page 34: Adding Or Modifying A Blackhole Mac Address Entry

    Step Command Remarks interface-number • Enter Layer 2 aggregate interface view: interface bridge-aggregation interface-number By default, no MAC address entry is configured on the interface. Add or modify a static or mac-address { dynamic | static } Make sure you have created the dynamic MAC address entry.
  • Page 35: Disabling Mac Address Learning

    Configuring a multiport unicast MAC address entry globally Step Command Remarks Enter system view. system-view By default, no multiport unicast MAC address entry is configured mac-address multiport globally. Add or modify a multiport mac-address interface unicast MAC address entry. Make sure you have created the interface-list vlan vlan-id VLAN and assigned the interface to the VLAN.
  • Page 36: Disabling Mac Address Learning On Interfaces

    Disabling MAC address learning on interfaces When global MAC address learning is enabled, you can disable MAC address learning on a single interface. To disable MAC address learning on an interface: Step Command Remarks Enter system view. system-view • Enter Layer 2 Ethernet interface view: interface interface-type...
  • Page 37: Enabling Mac Address Synchronization

    Enabling MAC address synchronization To avoid unnecessary floods and improve forwarding speed, make sure all cards have the same MAC address table. After you enable MAC address synchronization, each card advertises learned MAC address entries to other cards. After you enable MAC address synchronization on an IRF fabric, each card advertises learned MAC address entries to other cards of all member devices.
  • Page 38: Configuring Mac Address Move Notifications And Suppression

    Figure 5 MAC address tables of devices when Client A roams to AP D To enable MAC address synchronization: Step Command Remarks Enter system view. system-view Enable address default, address mac-address mac-roaming synchronization. synchronization is disabled. enable Configuring MAC address move notifications and suppression The outgoing interface for a MAC address entry learned on interface A is changed to interface B when the following conditions exist:...
  • Page 39: Enabling Arp Fast Update For Mac Address Moves

    To configure MAC address move notifications and MAC address move suppression: Step Command Remarks Enter system view. system-view By default, MAC address move notifications are disabled. If you do not specify a detection interval, the default setting of 1 minute is used. Enable MAC address move After you execute this command, the notifications and optionally...
  • Page 40: Enabling Mac Address Learning At Ingress

    Figure 6 ARP fast update application scenario Switch HGE1/0/1 HGE1/0/2 AP 1 AP 2 Laptop To enable ARP fast update for MAC address moves: Step Command Remarks Enter system view. system-view Enable ARP fast update for By default, ARP fast update for mac-address mac-move MAC address moves.
  • Page 41: Enabling Snmp Notifications For The Mac Address Table

    • The MAC address must be no lower than the base MAC address plus 90 (decimal). To configure the base MAC address: Step Command Remarks Enter system view. system-view Configure the base MAC By default, no base MAC address routing-interface base-mac address.
  • Page 42: Mac Address Table Configuration Example

    Task Command MAC address move records. (In IRF mode.) Display the MAC display mac-address mac-move [ chassis chassis-number slot address move records. slot-number ] MAC address table configuration example Network requirements As shown in Figure • Host A at MAC address 000f-e235-dc71 is connected to HundredGigE 1/0/1 of Device and belongs to VLAN 1.
  • Page 43 MAC Address VLAN ID State Port/NickName Aging 000f-e235-abcd Blackhole # Display the aging time of dynamic MAC address entries. [Device] display mac-address aging-time MAC address aging time: 500s.
  • Page 44: Configuring Mac Information

    Configuring MAC Information The MAC Information feature can generate syslog messages or SNMP notifications when MAC address entries are learned or deleted. You can use these messages to monitor user's leaving or joining the network and analyze network traffic. The MAC Information feature buffers the MAC change syslog messages or SNMP notifications in a queue.
  • Page 45: Setting The Mac Change Notification Interval

    Setting the MAC change notification interval To prevent syslog messages or SNMP notifications from being sent too frequently, you can set the MAC change notification interval to a larger value. To set the MAC change notification interval: Step Command Remarks Enter system view.
  • Page 46: Configuration Procedure

    correctly to the log host. The logging facility name and the severity level are configured by using the info-center loghost and info-center source commands, respectively. Configuration procedure Configure Device to send syslog messages to Host B: # Enable the information center. <Device>...
  • Page 47 Learns a new MAC address. Deletes an existing MAC address. [Device] interface hundredgige 1/0/1 [Device-HundredGigE1/0/1] mac-address information enable added [Device-HundredGigE1/0/1] mac-address information enable deleted [Device-HundredGigE1/0/1] quit # Set the MAC Information queue length to 100. [Device] mac-address information queue-length 100 # Set the MAC change notification interval to 20 seconds.
  • Page 48: Configuring Ethernet Link Aggregation

    Configuring Ethernet link aggregation Ethernet link aggregation bundles multiple physical Ethernet links into one logical link, called an aggregate link. Link aggregation has the following benefits: • Increased bandwidth beyond the limits of any single link. In an aggregate link, traffic is distributed across the member ports.
  • Page 49: Operational Key

    Its aggregate interface is configured as an edge aggregate interface. The port has not received Link Aggregation Control Protocol Data Units (LACPDUs) from its peer port. Operational key When aggregating ports, the system automatically assigns each port an operational key based on port information, such as port rate and duplex mode.
  • Page 50: Link Aggregation Modes

    Link aggregation modes An aggregation group operates in one of the following modes: • Static—Static aggregation is stable. An aggregation group in static mode is called a static aggregation group. The aggregation states of the member ports in a static aggregation group are not affected by the peer ports.
  • Page 51: Aggregating Links In Dynamic Mode

    Figure 10 Setting the aggregation state of a member port in a static aggregation group After the limit on Selected ports is reached, the aggregation state of a new member port varies by following conditions: • The port is placed in Unselected state if the port and the Selected ports have the same port priority.
  • Page 52: Lacp

    LACP LACP uses LACPDUs to exchange aggregation information between LACP-enabled devices. Each member port in a dynamic aggregation group can exchange information with its peer. When a member port receives an LACPDU, it compares the received information with information received on the other member ports.
  • Page 53: How Dynamic Link Aggregation Works

    • Long timeout interval—90 seconds. If you use the long timeout interval, the peer sends one LACPDU every 30 seconds. How dynamic link aggregation works Choosing a reference port The system chooses a reference port from the member ports in up state. A Selected port must have the same operational key and attribute configurations as the reference port.
  • Page 54 Figure 11 Setting the state of a member port in a dynamic aggregation group The system with the greater system ID can detect the aggregation state changes on the peer system. The system with the greater system ID sets the aggregation state of local member ports the same as their peer ports.
  • Page 55: Edge Aggregate Interface

    Edge aggregate interface Dynamic link aggregation fails on a server-facing aggregate interface if dynamic link aggregation is configured only on the device. The device forwards traffic by using only one of the physical ports that are connected to the server. To improve link reliability, configure the aggregate interface as an edge aggregate interface.
  • Page 56: Configuring An Aggregation Group

    Tasks at a glance • Configuring link aggregation load sharing algorithm settings (Optional.) Enabling link-aggregation traffic redirection (Optional.) Configuring the link aggregation capability for the device Configuring an aggregation group This section explains how to configure an aggregation group. Configuration restrictions and guidelines When you configure an aggregation group, follow these restrictions and guidelines: •...
  • Page 57: Configuring A Layer 3 Aggregation Group

    Configuring a Layer 2 dynamic aggregation group Step Command Remarks Enter system view. system-view By default, the system LACP priority is 32768. Changing system LACP Set the system LACP priority. lacp system-priority priority priority might affect aggregation states of the ports in a dynamic aggregation group.
  • Page 58 Step Command Remarks interface and enter Layer 3 aggregate interface, the system interface-number aggregate interface view. automatically creates a Layer 3 static aggregation group numbered the same. Exit to system view. quit Enter Layer Ethernet interface view: interface interface-type Repeat these two substeps to Assign an interface to the interface-number assign more Layer 3 Ethernet...
  • Page 59: Configuring An Aggregate Interface

    Step Command Remarks By default, the long LACP timeout interval (90 seconds) is used by the interface. To avoid traffic interruption during Set the short LACP timeout an ISSU, do not set the short interval (3 seconds) for the lacp period short LACP timeout interval before interface.
  • Page 60: Specifying Ignored Vlans For A Layer 2 Aggregate Interface

    Step Command Remarks Enter system view. system-view Enter Layer 3 aggregate interface route-aggregation interface subinterface interface-number view. interface-number.subnumber } By default: • All aggregate interfaces on a device use the same MAC address. • Aggregate interfaces Set the MAC address for the different devices mac-address mac-address...
  • Page 61: Setting The Minimum And Maximum Numbers Of Selected Ports For An Aggregation Group

    Setting the minimum and maximum numbers of Selected ports for an aggregation group IMPORTANT: The minimum and maximum numbers of Selected ports must be the same for the local and peer aggregation groups. The bandwidth of an aggregate link increases as the number of Selected member ports increases. To avoid congestion, you can set the minimum number of Selected ports required for bringing up an aggregate interface.
  • Page 62: Setting The Expected Bandwidth For An Aggregate Interface

    Setting the expected bandwidth for an aggregate interface Step Command Remarks Enter system view. system-view • Enter Layer 2 aggregate interface view: interface bridge-aggregation interface-number • Enter Layer 3 aggregate Enter aggregate interface interface subinterface view. view: interface route-aggregation interface-number interface-number.subnumbe default, expected...
  • Page 63: Enabling Bfd For An Aggregation Group

    Enabling BFD for an aggregation group BFD for Ethernet link aggregation can monitor member link status in an aggregation group. After you enable BFD on an aggregate interface, each Selected port in the aggregation group establishes a BFD session with its peer port. BFD operates differently depending on the aggregation mode. •...
  • Page 64: Shutting Down An Aggregate Interface

    Step Command Remarks By default, BFD is disabled for an aggregation group. Enable link-aggregation bfd ipv4 source The source and destination IP aggregation group. ip-address destination ip-address addresses of BFD sessions must be unicast addresses excluding 0.0.0.0. Shutting down an aggregate interface Shutting down or bringing up an aggregate interface affects the aggregation states and link states of member ports in the corresponding aggregation group as follows: •...
  • Page 65: Configuring Load Sharing For Link Aggregation Groups

    Configuring load sharing for link aggregation groups This section explains how to configure the load sharing modes for link aggregation groups and how to enable local-first load sharing for link aggregation. Setting load sharing modes for link aggregation groups You can set the global or group-specific load sharing mode. A link aggregation group preferentially uses the group-specific load sharing mode.
  • Page 66: Enabling Local-First Load Sharing For Link Aggregation

    Step Command Remarks interface route-aggregation interface-number By default, the group-specific load sharing mode is the same Set the load sharing mode link-aggregation load-sharing as the global load sharing mode. for the aggregation group. mode flexible Aggregate interfaces support only per-packet load sharing. Enabling local-first load sharing for link aggregation Use local-first load sharing in a multidevice link aggregation scenario to distribute traffic preferentially across member ports on the ingress card.
  • Page 67: Enabling Link-Aggregation Traffic Redirection

    This feature takes effect only when the per-flow load sharing mode is used and the per-flow load sharing mode does not use the following traffic classification criteria: • Source IP address. • Destination IP address. • Source MAC address. • Destination MAC address.
  • Page 68: Configuration Procedure

    Configuration procedure To enable link-aggregation traffic redirection globally: Step Command Remarks Enter system view. system-view link-aggregation lacp Enable link-aggregation By default, link-aggregation traffic traffic-redirect-notification traffic redirection globally. redirection is disabled globally. enable To enable link-aggregation traffic redirection for an aggregation group: Step Command Remarks...
  • Page 69: Displaying And Maintaining Ethernet Link Aggregation

    Step Command Remarks for the device. and an aggregation group can have a max-selected-port maximum of 16 Selected ports. max-selected-port-number Displaying and maintaining Ethernet link aggregation Execute display commands in any view and reset commands in user view. Task Command display interface bridge-aggregation...
  • Page 70 • Enable VLAN 10 at one end of the aggregate link to communicate with VLAN 10 at the other end. • Enable VLAN 20 at one end of the aggregate link to communicate with VLAN 20 at the other end. Figure 13 Network diagram Configuration procedure Configure Device A:...
  • Page 71: Layer 2 Dynamic Aggregation Configuration Example

    [DeviceA-Bridge-Aggregation1] quit Configure Device B in the same way Device A is configured. (Details not shown.) Verifying the configuration # Display detailed information about all aggregation groups on Device A. [DeviceA] display link-aggregation verbose Loadsharing Type: Shar -- Loadsharing, NonS -- Non-Loadsharing Port Status: S -- Selected, U -- Unselected, I -- Individual Port: A -- Auto port, M -- Management port, R -- Reference port Flags:...
  • Page 72 Configuration procedure Configure Device A: # Create VLAN 10, and assign the port HundredGigE 1/0/4 to VLAN 10. <DeviceA> system-view [DeviceA] vlan 10 [DeviceA-vlan10] port hundredgige 1/0/4 [DeviceA-vlan10] quit # Create VLAN 20, and assign the port HundredGigE 1/0/5 to VLAN 20. [DeviceA] vlan 20 [DeviceA-vlan20] port hundredgige 1/0/5 [DeviceA-vlan20] quit...
  • Page 73: Layer 2 Aggregation Load Sharing Configuration Example

    System ID: 0x8000, 000f-e267-6c6a Local: Port Status Priority Index Oper-Key Flag HGE1/0/1 32768 {ACDEF} HGE1/0/2 32768 {ACDEF} HGE1/0/3 32768 {ACDEF} Remote: Actor Priority Index Oper-Key SystemID Flag HGE1/0/1 32768 0x8000, 000f-e267-57ad {ACDEF} HGE1/0/2 32768 0x8000, 000f-e267-57ad {ACDEF} HGE1/0/3 32768 0x8000, 000f-e267-57ad {ACDEF} The output shows that link aggregation group 1 is a Layer 2 dynamic aggregation group that contains three Selected ports.
  • Page 74 [DeviceA-vlan10] port hundredgige 1/0/5 [DeviceA-vlan10] quit # Create VLAN 20, and assign the port HundredGigE 1/0/6 to VLAN 20. [DeviceA] vlan 20 [DeviceA-vlan20] port hundredgige 1/0/6 [DeviceA-vlan20] quit # Create Layer 2 aggregate interface Bridge-Aggregation 1. [DeviceA] interface bridge-aggregation 1 # Configure Layer 2 aggregation group 1 to load share packets based on source MAC addresses.
  • Page 75: Layer 2 Edge Aggregate Interface Configuration Example

    Loadsharing Type: Shar -- Loadsharing, NonS -- Non-Loadsharing Port Status: S -- Selected, U -- Unselected, I -- Individual Port: A -- Auto port, M -- Management port, R -- Reference port Flags: A -- LACP_Activity, B -- LACP_Timeout, C -- Aggregation, D -- Synchronization, E -- Collecting, F -- Distributing, G -- Defaulted, H -- Expired Aggregate Interface: Bridge-Aggregation1...
  • Page 76 Figure 16 Network diagram Configuration procedure # Create Layer 2 aggregate interface Bridge-Aggregation 1, and set the link aggregation mode to dynamic. <Device> system-view [Device] interface bridge-aggregation 1 [Device-Bridge-Aggregation1] link-aggregation mode dynamic # Configure Layer 2 aggregate interface Bridge-Aggregation 1 as an edge aggregate interface. [Device-Bridge-Aggregation1] lacp edge-port [Device-Bridge-Aggregation1] quit # Assign ports HundredGigE 1/0/1 and HundredGigE 1/0/2 to link aggregation group 1.
  • Page 77: Layer 3 Static Aggregation Configuration Example

    The output shows that HundredGigE 1/0/1 and HundredGigE 1/0/2 are in Individual state when they do not receive LACPDUs from the server. Both HundredGigE 1/0/1 and HundredGigE 1/0/2 can forward traffic. When one port fails, its traffic is automatically switched to the other port. Layer 3 static aggregation configuration example Network requirements On the network shown in...
  • Page 78: Layer 3 Dynamic Aggregation Configuration Example

    Aggregation Mode: Static Loadsharing Type: NonS Management VLANs: None Port Status Priority Oper-Key -------------------------------------------------------------------------------- HGE1/0/1 32768 HGE1/0/2 32768 HGE1/0/3 32768 The output shows that link aggregation group 1 is a Layer 3 static aggregation group that contains three Selected ports. Layer 3 dynamic aggregation configuration example Network requirements On the network shown in...
  • Page 79: Layer 3 Aggregation Load Sharing Configuration Example

    Verifying the configuration # Display detailed information about all aggregation groups on Device A. [DeviceA] display link-aggregation verbose Loadsharing Type: Shar -- Loadsharing, NonS -- Non-Loadsharing Port Status: S -- Selected, U -- Unselected, I -- Individual Port: A -- Auto port, M -- Management port, R -- Reference port Flags: A -- LACP_Activity, B -- LACP_Timeout, C -- Aggregation, D -- Synchronization, E -- Collecting, F -- Distributing,...
  • Page 80 <DeviceA> system-view [DeviceA] interface route-aggregation 1 # Configure Layer 3 aggregation group 1 to load share packets based on source IP addresses. [DeviceA-Route-Aggregation1] link-aggregation load-sharing mode source-ip # Configure an IP address and subnet mask for Layer 3 aggregate interface Route-Aggregation [DeviceA-Route-Aggregation1] ip address 192.168.1.1 24 [DeviceA-Route-Aggregation1] quit # Assign Layer 3 Ethernet interfaces HundredGigE 1/0/1 and HundredGigE 1/0/2 to...
  • Page 81: Layer 3 Edge Aggregate Interface Configuration Example

    Port Status Priority Oper-Key -------------------------------------------------------------------------------- HGE1/0/1 32768 HGE1/0/2 32768 Aggregate Interface: Route-Aggregation2 Aggregation Mode: Static Loadsharing Type: Shar Management VLANs: None Port Status Priority Oper-Key -------------------------------------------------------------------------------- HGE1/0/3 32768 HGE1/0/4 32768 The output shows that: • Link aggregation groups 1 and 2 are both load-shared Layer 3 static aggregation groups. •...
  • Page 82 [Device-Route-Aggregation1] link-aggregation mode dynamic # Configure an IP address and subnet mask for Layer 3 aggregate interface Route-Aggregation 1. [Device-Route-Aggregation1] ip address 192.168.1.1 24 # Configure Layer 3 aggregate interface Route-Aggregation 1 as an edge aggregate interface. [Device-Route-Aggregation1] lacp edge-port [Device-Route-Aggregation1] quit # Assign Layer 3 Ethernet interfaces HundredGigE 1/0/1 and HundredGigE 1/0/2 to aggregation group 1.
  • Page 83: Configuring Port Isolation

    Configuring port isolation The port isolation feature isolates Layer 2 traffic for data privacy and security without using VLANs. Ports in an isolation group cannot communicate with each other. However, they can communicate with ports outside the isolation group. Assigning a port to an isolation group The device supports multiple isolation groups, which can be configured manually.
  • Page 84: Port Isolation Configuration Example

    Port isolation configuration example Network requirements As shown in Figure • LAN users Host A, Host B, and Host C are connected to HundredGigE 1/0/1, HundredGigE 1/0/2, and HundredGigE 1/0/3 on the device, respectively. • The device connects to the Internet through HundredGigE 1/0/4. Configure the device to provide Internet access for the hosts, and isolate them from one another at Layer 2.
  • Page 85 Group ID: 1 Group members: HundredGigE1/0/1 HundredGigE1/0/2 HundredGigE1/0/3 The output shows that HundredGigE 1/0/1, HundredGigE 1/0/2, and HundredGigE 1/0/3 are assigned to isolation group 1. As a result, Host A, Host B, and Host C are isolated from one another at layer 2.
  • Page 86: Configuring Spanning Tree Protocols

    Configuring spanning tree protocols Spanning tree protocols eliminate loops in a physical link-redundant network by selectively blocking redundant links and putting them in a standby state. The recent versions of STP include the Rapid Spanning Tree Protocol (RSTP), the Per-VLAN Spanning Tree (PVST), and the Multiple Spanning Tree Protocol (MSTP).
  • Page 87 • Protocol ID—Fixed at 0x0000, which represents IEEE 802.1d. • Protocol version ID—Spanning tree protocol version ID. The protocol version ID for STP is 0x00. • BPDU type—Type of the BPDU. The value is 0x00 for a configuration BPDU. • Flags—An 8-bit field indicates the purpose of the BPDU.
  • Page 88: Basic Concepts In Stp

    Basic concepts in STP Root bridge A tree network must have a root bridge. The entire network contains only one root bridge, and all the other bridges in the network are called leaf nodes. The root bridge is not permanent, but can change with changes of the network topology.
  • Page 89: Calculation Process Of The Stp Algorithm

    Table 5 STP port states State Receives/sends BPDUs Learns MAC addresses Forwards use data Disabled Listening Learning Forwarding Blocking Receive Path cost Path cost is a reference value used for link selection in STP. To prune the network into a loop-free tree, STP calculates path costs to select the most robust links and block redundant links that are less robust.
  • Page 90 Step Description Considers this port as the designated port. Replaces the configuration BPDU on the port with the calculated configuration BPDU. Periodically sends the calculated configuration BPDU. • If the configuration BPDU on the port is superior, the device blocks this port without updating its configuration BPDU.
  • Page 91 Figure 25 The STP algorithm As shown in Figure 25, the priority values of Device A, Device B, and Device C are 0, 1, and 2, respectively. The path costs of links among the three devices are 5, 10, and 4. Device state initialization.
  • Page 92 Configuration BPDU Device Comparison process ports after comparison Port C1}. Determines that its existing configuration BPDU {0, 0, 0, Port A2} is superior to the received configuration BPDU. Discards the received one. Device A determines that it is both the root bridge and designated bridge in the configuration BPDUs of all its ports.
  • Page 93 Configuration BPDU Device Comparison process ports after comparison Device C performs the following operations: Compares the configuration BPDUs of all its ports. Decides that the configuration BPDU of Port C1 is the optimum. Selects Port C1 as the root port with the configuration •...
  • Page 94 Figure 26 The final calculated spanning tree The configuration BPDU forwarding mechanism of STP The configuration BPDUs of STP are forwarded according to these guidelines: • Upon network initiation, every device regards itself as the root bridge and generates configuration BPDUs with itself as the root. Then it sends the configuration BPDUs at a regular hello interval.
  • Page 95: Rstp

    • Max age The device uses the max age to determine whether a stored configuration BPDU has expired and discards it if the max age is exceeded. By default, the max age is 20 seconds. In the CIST of an MSTP network, the device uses the max age timer to determine whether a configuration BPDU received by a port has expired.
  • Page 96: How Rstp Works

    Table 9 Port state differences between RSTP and STP RSTP port Sends Learns Forwards user STP port state state BPDU addresses data Disabled Discarding Blocking Discarding Listening Discarding Learning Learning Forwarding Forwarding How RSTP works During RSTP calculation, the following events occur: •...
  • Page 97: Pvst

    Because each VLAN runs RSTP independently, a spanning tree only serves its VLAN. A PVST-enabled H3C device can communicate with a third-party device that is running Rapid PVST or PVST. The PVST-enabled H3C device supports fast network convergence like RSTP when connected to PVST-enabled H3C devices or third-party devices enabled with Rapid PVST.
  • Page 98: Basic Concepts In Pvst

    VLANs. In this way, loops in each VLAN are eliminated and traffic of different VLANs is load shared over links. PVST uses RSTP BPDUs in the default VLAN and PVST BPDUs in other VLANs for spanning tree calculation. H3C PVST implements per-VLAN spanning tree calculation by mapping each VLAN to an MSTI.
  • Page 99 Figure 29 MSTP BPDU format The first 13 fields of an MSTP BPDU are the same as an RSTP BPDU. The other six fields are unique to MSTP. • Protocol version ID—The value is 0x03 for MSTP. • BPDU type—The value is 0x02 for RSTP/MSTP BPDUs. •...
  • Page 100: Mstp Basic Concepts

    MSTP basic concepts Figure 30 shows a switched network that contains four MST regions, each MST region containing four MSTP devices. Figure 31 shows the networking topology of MST region 3. Figure 30 Basic concepts in MSTP VLAN 1 MSTI 1 VLAN 1 MSTI 1 VLAN 2...
  • Page 101 MST region A multiple spanning tree region (MST region) consists of multiple devices in a switched network and the network segments among them. All these devices have the following characteristics: • A spanning tree protocol enabled • Same region name •...
  • Page 102 • The regional root of MSTI 1 is Device B. • The regional root of MSTI 2 is Device C. • The regional root of MSTI 0 (also known as the IST) is Device A. Common root bridge The common root bridge is the root bridge of the CIST. Figure 30, the common root bridge is a device in MST region 1.
  • Page 103: How Mstp Works

    CIST. However, that is not true with master ports. A master port on MSTIs is a root port on the CIST. Port states In MSTP, a port can be in one of the following states: • Forwarding—The port receives and sends BPDUs, learns MAC addresses, and forwards user traffic.
  • Page 104: Mstp Implementation On Devices

    • Within an MST region, the frame is forwarded along the corresponding MSTI. • Between two MST regions, the frame is forwarded along the CST. MSTP implementation on devices MSTP is compatible with STP and RSTP. Devices that are running MSTP and that are used for spanning tree calculation can identify STP and RSTP protocol frames.
  • Page 105 Root port rapid transition When a root port is blocked, the bridge will elect the alternate port with the highest priority as the new root port. If the new root port's peer is in the forwarding state, the new root port immediately transits to the forwarding state.
  • Page 106: Protocols And Standards

    Figure 35 P/A transition for RSTP and PVST • P/A transition for MSTP. In MSTP, an upstream bridge sets both the proposal and agreement flags in its BPDU. If a downstream bridge receives the BPDU and its receiving port is elected as the root port, the bridge blocks all the other ports except edge ports.
  • Page 107: Spanning Tree Configuration Task Lists

    Spanning tree configuration task lists Before configuring a spanning tree, complete the following tasks: • Determine the spanning tree protocol to be used (STP, RSTP, PVST, or MSTP). • Plan the device roles (the root bridge or leaf node). When you configure spanning tree protocols, follow these restrictions and guidelines: •...
  • Page 108: Rstp Configuration Task List

    RSTP configuration task list Tasks at a glance Configuring the root bridge: • (Required.) Setting the spanning tree mode • (Optional.) Configuring the root bridge or a secondary root bridge • (Optional.) Configuring the device priority • (Optional.) Configuring the network diameter of a switched network •...
  • Page 109: Mstp Configuration Task List

    Tasks at a glance • (Required.) Setting the spanning tree mode • (Optional.) Configuring the device priority • (Optional.) Setting the timeout factor • (Optional.) Configuring the BPDU transmission rate • (Optional.) Configuring edge ports • (Optional.) Configuring path costs of ports •...
  • Page 110: Setting The Spanning Tree Mode

    Tasks at a glance (Optional.) Performing mCheck (Optional.) Configuring Digest Snooping (Optional.) Configuring No Agreement Check (Optional.) Configuring TC Snooping (Optional.) Configuring protection features (Optional.) Enabling SNMP notifications for new-root election and topology change events Setting the spanning tree mode The spanning tree modes include: •...
  • Page 111: Configuring The Root Bridge Or A Secondary Root Bridge

    • VLAN-to-instance mapping entries in the MST region. The configuration of MST region-related parameters (especially the VLAN-to-instance mapping table) might cause MSTP to begin a new spanning tree calculation. To reduce the possibility of topology instability, the MST region configuration takes effect only after you activate it by doing one of the following: •...
  • Page 112: Configuring The Device As The Root Bridge Of A Specific Spanning Tree

    You can configure a device as the root bridge by setting the device priority to 0. For the device priority configuration, see "Configuring the device priority." Configuring the device as the root bridge of a specific spanning tree Step Command Remarks Enter system view.
  • Page 113: Configuring The Maximum Hops Of An Mst Region

    Step Command Remarks stp [ instance instance-list ] priority priority Configuring the maximum hops of an MST region Restrict the region size by setting the maximum hops of an MST region. The hop limit configured on the regional root bridge is used as the hop limit for the MST region. Configuration BPDUs sent by the regional root bridge always have a hop count set to the maximum value.
  • Page 114: Setting Spanning Tree Timers

    Step Command Remarks diameter Setting spanning tree timers The following timers are used for spanning tree calculation: • Forward delay—Delay time for port state transition. To prevent temporary loops on a network, the spanning tree feature sets an intermediate port state (the learning state) before it transits from the discarding state to the forwarding state.
  • Page 115: Setting The Timeout Factor

    Step Command Remarks Enter system view. system-view • STP/RSTP/MSTP mode: stp timer forward-delay time Set the forward delay • The default setting is 15 seconds. PVST mode: timer. vlan vlan-id-list timer forward-delay time • STP/RSTP/MSTP mode: stp timer hello time Set the hello timer.
  • Page 116: Configuring Edge Ports

    To configure the BPDU transmission rate: Step Command Remarks Enter system view. system-view Enter Layer Ethernet interface interface-type interface Layer interface-number aggregate interface view. Configure BPDU transmission rate The default setting is 10. stp transmit-limit limit ports. Configuring edge ports If a port directly connects to a user terminal rather than another device or a shared LAN segment, this port is regarded as an edge port.
  • Page 117: Specifying A Standard For The Device To Use When It Calculates The Default Path Cost

    Specifying a standard for the device to use when it calculates the default path cost CAUTION: If you change the standard that the device uses to calculate the default path costs, you restore the path costs to the default. You can specify a standard for the device to use in automatic calculation for the default path cost. The device supports the following standards: •...
  • Page 118 Path cost Link speed Port type IEEE Private IEEE 802.1t 802.1d-1998 standard containing four Selected ports Single port 200000 Aggregate interface containing two Selected 100000 ports Aggregate interface 100 Mbps containing three Selected 66666 ports Aggregate interface containing four Selected 50000 ports Single port...
  • Page 119: Configuring Path Costs Of Ports

    Path cost Link speed Port type IEEE Private IEEE 802.1t 802.1d-1998 standard containing three Selected ports Aggregate interface containing four Selected ports Single port Aggregate interface containing two Selected ports Aggregate interface 100 Gbps containing three Selected ports Aggregate interface containing four Selected ports Configuring path costs of ports...
  • Page 120: Configuring The Port Priority

    [Sysname-HundredGigE1/0/3] stp instance 2 cost 200 # In PVST mode, perform the following tasks: • Configure the device to calculate the default path costs of its ports by using IEEE 802.1d-1998. • Set the path cost of HundredGigE 1/0/3 to 2000 on VLAN 20 through VLAN 30. <Sysname>...
  • Page 121: Configuration Procedure

    • You can configure the link type as point-to-point for a Layer 2 aggregate interface or a port that operates in full duplex mode. As a best practice, use the default setting and let the device automatically detect the port link type. •...
  • Page 122: Enabling Outputting Port State Transition Information

    Enabling outputting port state transition information In a large-scale spanning tree network, you can enable devices to output the port state transition information. Then, you can monitor the port states in real time. To enable outputting port state transition information: Step Command Remarks...
  • Page 123: Performing Mcheck

    Step Command Remarks Enable the spanning tree By default, the spanning tree stp global enable feature. feature is globally disabled. Enable the spanning tree By default, the spanning tree stp vlan vlan-id-list enable feature in VLANs. feature is enabled in VLANs. Enter Layer Ethernet...
  • Page 124: Disabling Inconsistent Pvid Protection

    The devices of different vendors in the same MST region cannot communicate with each other. To enable communication between an H3C device and a third-party device in the same MST region, enable Digest Snooping on the H3C device port connecting them.
  • Page 125: Configuration Restrictions And Guidelines

    Digest Snooping when the network is already working well. Configuration procedure Use this feature on when your H3C device is connected to a third-party device that uses its private key to calculate the configuration digest. To configure Digest Snooping:...
  • Page 126: Configuring No Agreement Check

    Figure 37 Network diagram MST region Device C Root bridge Root port HGE1/0/1 HGE1/0/2 Designated port Blocked port Normal link HGE1/0/1 HGE1/0/1 Blocked link HGE1/0/2 HGE1/0/2 Device A Device B Configuration procedure # Enable Digest Snooping on HundredGigE 1/0/1 of Device A and enable global Digest Snooping on Device A.
  • Page 127: Configuration Prerequisites

    Figure 38 Rapid state transition of an MSTP designated port Upstream device Downstream device (1) Proposal for rapid transition The root port blocks non-edge ports. The root port changes to the (2) Agreement forwarding state and sends an Agreement to the upstream device.
  • Page 128: Configuration Procedure

    Configuration procedure Enable the No Agreement Check feature on the root port. To configure No Agreement Check: Step Command Remarks Enter system view. system-view Enter Layer 2 Ethernet interface Layer interface interface-type interface-number aggregate interface view. Enable Agreement By default, No Agreement stp no-agreement-check Check.
  • Page 129: Configuration Restrictions And Guidelines

    Figure 41 TC Snooping application scenario To avoid traffic interruption, you can enable TC Snooping on the IRF fabric. After receiving a TC-BPDU through a port, the IRF fabric updates MAC address table and ARP table entries associated with the port's VLAN. In this way, TC Snooping prevents topology change from interrupting traffic forwarding in the network.
  • Page 130: Configuring Bpdu Guard

    • TC-BPDU transmission restriction • TC-BPDU guard • BPDU drop • PVST BPDU guard Configuring BPDU guard For access layer devices, the access ports can directly connect to the user terminals (such as PCs) or file servers. The access ports are configured as edge ports to allow rapid transition. When these ports receive configuration BPDUs, the system automatically sets the ports as non-edge ports and starts a new spanning tree calculation process.
  • Page 131: Enabling Root Guard

    Step Command Remarks global BPDU status. Enabling root guard The root bridge and secondary root bridge of a spanning tree should be located in the same MST region. Especially for the CIST, the root bridge and secondary root bridge are put in a high-bandwidth core region during network design.
  • Page 132: Configuring Port Role Restriction

    Configure loop guard on the root port and alternate ports of a device. To enable loop guard: Step Command Remarks Enter system view. system-view Enter Layer 2 Ethernet interface or interface interface-type Layer 2 aggregate interface view. interface-number Enable the loop guard feature for the By default, loop guard is stp loop-protection ports.
  • Page 133: Enabling Tc-Bpdu Guard

    Step Command Remarks Enter Layer Ethernet interface interface-type interface Layer interface-number aggregate interface view. default, TC-BPDU Enable TC-BPDU transmission restriction stp tc-restriction transmission restriction. disabled. Enabling TC-BPDU guard When a device receives topology change (TC) BPDUs (the BPDUs that notify devices of topology changes), it flushes its forwarding address entries.
  • Page 134: Enabling Pvst Bpdu Guard

    Enabling PVST BPDU guard An MSTP-enabled device forwards PVST BPDUs as data traffic because it cannot recognize PVST BPDUs. If a PVST-enabled device in another independent network receives the PVST BPDUs, a PVST calculation error might occur. To avoid PVST calculation errors, enable PVST BPDU guard on the MSTP-enabled device.
  • Page 135: Displaying And Maintaining The Spanning Tree

    Step Command Remarks In STP, MSTP, or RSTP mode, default settings execute either of the following follows: commands: • SNMP notifications Enable SNMP notifications • disabled new-root snmp-agent trap enable for new-root election events. election events. stp new-root • • MSTP mode, SNMP...
  • Page 136: Spanning Tree Configuration Example

    Spanning tree configuration example MSTP configuration example Network requirements As shown in Figure 42, all devices on the network are in the same MST region. Device A and Device B work at the distribution layer. Device C and Device D work at the access layer. Configure MSTP so that frames of different VLANs are forwarded along different spanning trees.
  • Page 137 [DeviceA-mst-region] instance 3 vlan 30 [DeviceA-mst-region] instance 4 vlan 40 # Configure the revision level of the MST region as 0. [DeviceA-mst-region] revision-level 0 # Activate MST region configuration. [DeviceA-mst-region] active region-configuration [DeviceA-mst-region] quit # Configure the Device A as the root bridge of MSTI 1. [DeviceA] stp instance 1 root primary # Enable the spanning tree feature globally.
  • Page 138 Configure Device D: # Enter MST region view, and configure the MST region name as example. <DeviceD> system-view [DeviceD] stp region-configuration [DeviceD-mst-region] region-name example # Map VLAN 10, VLAN 30, and VLAN 40 to MSTI 1, MSTI 3, and MSTI 4, respectively. [DeviceD-mst-region] instance 1 vlan 10 [DeviceD-mst-region] instance 3 vlan 30 [DeviceD-mst-region] instance 4 vlan 40...
  • Page 139: Pvst Configuration Example

    HundredGigE1/0/1 ROOT FORWARDING NONE HundredGigE1/0/2 ALTE DISCARDING NONE HundredGigE1/0/3 DESI FORWARDING NONE # Display brief spanning tree information on Device D. [DeviceD] display stp brief MST ID Port Role STP State Protection HundredGigE1/0/1 ROOT FORWARDING NONE HundredGigE1/0/2 ALTE DISCARDING NONE HundredGigE1/0/3 ALTE DISCARDING...
  • Page 140 Figure 44 Network diagram Configuration procedure Configure VLANs and VLAN member ports. (Details not shown.) Create VLAN 10, VLAN 20, and VLAN 30 on both Device A and Device B. Create VLAN 10, VLAN 20, and VLAN 40 on Device C. Create VLAN 20, VLAN 30, and VLAN 40 on Device D.
  • Page 141 [DeviceC] stp vlan 10 20 40 enable Configure Device D: # Set the spanning tree mode to PVST. <DeviceD> system-view [DeviceD] stp mode pvst # Enable the spanning tree feature globally and in VLAN 20, VLAN 30, and VLAN 40. [DeviceD] stp global enable [DeviceD] stp vlan 20 30 40 enable Verifying the configuration...
  • Page 142 HundredGigE1/0/2 ALTE DISCARDING NONE HundredGigE1/0/3 ROOT FORWARDING NONE Based on the output, you can draw a topology for each VLAN spanning tree, as shown in Figure Figure 45 VLAN spanning tree topologies...
  • Page 143: Configuring Loop Detection

    Configuring loop detection Overview Incorrect network connections or configurations can create Layer 2 loops, which results in repeated transmission of broadcasts, multicasts, or unknown unicasts. The repeated transmissions can waste network resources and can paralyze networks. The loop detection mechanism immediately generates a log when a loop occurs so that you are promptly notified to adjust network connections and configurations.
  • Page 144: Loop Detection Interval

    The inner frame header for loop detection contains the following fields: • Code—Protocol sub-type, which is 0x0001, indicating the loop detection protocol. • Version—Protocol version, which is always 0x0000. • Length—Length of the frame. The value includes the inner header, but excludes the Ethernet header.
  • Page 145: Loop Detection Configuration Task List

    The device automatically sets the port to the forwarding state after the detection timer set by using the shutdown-interval command expires. For more information about the shutdown-interval command, see Fundamentals Command Reference. The device shuts down the port again if a loop is still detected on the port when the detection timer expires.
  • Page 146: Setting The Loop Protection Action

    Setting the loop protection action You can set the loop protection action globally or on a per-port basis. The global setting applies to all ports. The per-port setting applies to the individual ports. The per-port setting takes precedence over the global setting. Setting the global loop protection action Step Command...
  • Page 147: Displaying And Maintaining Loop Detection

    Step Command Remarks Enter system view. system-view loop detection loopback-detection The default setting is 30 seconds. interval. interval-time interval Displaying and maintaining loop detection Execute display commands in any view. Task Command Display the loop detection configuration and status. display loopback-detection Loop detection configuration example Network requirements As shown in...
  • Page 148: Verifying The Configuration

    # Configure HundredGigE 1/0/1 and HundredGigE 1/0/2 as trunk ports, and assign them to VLAN 100. [DeviceA] interface HundredGigE 1/0/1 [DeviceA-HundredGigE1/0/1] port link-type trunk [DeviceA-HundredGigE1/0/1] port trunk permit vlan 100 [DeviceA-HundredGigE1/0/1] quit [DeviceA] interface hundredgige 1/0/2 [DeviceA-HundredGigE1/0/2] port link-type trunk [DeviceA-HundredGigE1/0/2] port trunk permit vlan 100 [DeviceA-HundredGigE1/0/2] quit # Set the global loop protection action to shutdown.
  • Page 149 [DeviceA] %Feb 24 15:04:29:663 2013 DeviceA LPDT/4/LPDT LOOPED: Loopback exists on HundredGigE1/0/1. %Feb 24 15:04:29:667 2013 DeviceA LPDT/4/LPDT LOOPED: Loopback exists on HundredGigE1/0/2. %Feb 24 15:04:44:243 2013 DeviceA LPDT/5/LPDT RECOVERED: Loopback on HundredGigE1/0/1 recovered. %Feb 24 15:04:44:248 2013 DeviceA LPDT/5/LPDT RECOVERED: Loopback on HundredGigE1/0/2 recovered.
  • Page 150: Configuring Vlans

    Configuring VLANs Overview Ethernet is a family of shared-media LAN technologies based on the CSMA/CD mechanism. An Ethernet LAN is both a collision domain and a broadcast domain. Because the medium is shared, collisions and broadcasts are common in an Ethernet LAN. Typically, bridges and Layer 2 switches can reduce collisions in an Ethernet LAN.
  • Page 151: Protocols And Standards

    TPID to a different value. For compatibility with a neighbor device, set the TPID value on the device to be the same as the neighbor device. • Priority—3-bit long, identifies the 802.1p priority of the frame. For more information, see ACL and QoS Configuration Guide.
  • Page 152: Configuring Vlan Interfaces

    NOTE: • As the system default VLAN, VLAN 1 cannot be created or deleted. • Before you delete a dynamic VLAN or a VLAN locked by an application, you must first remove the configuration from the VLAN. Configuring VLAN interfaces Hosts of different VLANs use VLAN interfaces to communicate at Layer 3.
  • Page 153: Configuring Port-Based Vlans

    Configuring port-based VLANs Introduction Port-based VLANs group VLAN members by port. A port forwards packets from a VLAN only after it is assigned to the VLAN. Port link type You can set the link type of a port to access, trunk, or hybrid. The port link type determines whether the port can be assigned to multiple VLANs.
  • Page 154: Assigning An Access Port To A Vlan

    Actions Access Trunk Hybrid its VLAN ID is different from the PVID. • Removes and sends the frame if the frame carries the PVID tag and the Sends the frame if its VLAN is port belongs to the permitted on the port. The PVID.
  • Page 155: Assigning A Hybrid Port To A Vlan

    • To change the link type of a port from trunk to hybrid, set the link type to access first. • To enable a trunk port to transmit packets from its PVID, you must assign the trunk port to the PVID by using the port trunk permit vlan command.
  • Page 156: Displaying And Maintaining Vlans

    Displaying and maintaining VLANs Execute display commands in any view and reset commands in user view. Task Command display interface vlan-interface [ interface-number ] [ brief Display VLAN interface information. [ description | down ] ] display vlan [ vlan-id1 [ to vlan-id2 ] | all | dynamic | reserved Display VLAN information.
  • Page 157: Verifying The Configuration

    [DeviceA-vlan200] quit # Configure HundredGigE 1/0/3 as a trunk port, and assign the port to VLANs 100 and 200. [DeviceA] interface hundredgige 1/0/3 [DeviceA-HundredGigE1/0/3] port link-type trunk [DeviceA-HundredGigE1/0/3] port trunk permit vlan 100 200 Please wait... Done. Configure Device B in the same way Device A is configured. (Details not shown.) Configure hosts: a.
  • Page 158: Configuring Vlan Mapping

    Configuring VLAN mapping Overview VLAN mapping re-marks VLAN tagged traffic with new VLAN IDs. H3C provides the following types of VLAN mapping: • One-to-one VLAN mapping—Replaces one VLAN tag with another. • One-to-two VLAN mapping—Tags single-tagged packets with an outer VLAN tag.
  • Page 159 Figure 52 Application scenario of one-to-one VLAN mapping DHCP client VLAN 1 Home gateway VLAN 2 VLAN 1 -> VLAN 101 VLAN 2 -> VLAN 201 VLAN 3 VoIP VLAN 3 -> VLAN 301 Wiring-closet switch DHCP server VLAN 1 VLAN 1 ->...
  • Page 160: Vlan Mapping Implementations

    Figure 53 Application scenario of one-to-two and two-to-two VLAN mapping Site 1 and Site 2 are in VLAN 2 and VLAN 3, respectively. The SP 1 network assigns SVLAN 10 to Site 1. The SP 2 network assigns SVLAN 20 to Site 2. When the packet from Site 1 arrives at PE 1, PE 1 tags the packet with SVLAN 10 by using one-to-two VLAN mapping.
  • Page 161 Figure 54 Basic VLAN mapping terms Network-side port Customer-side port Uplink traffic Downlink traffic One-to-one VLAN mapping As shown in Figure 55, one-to-one VLAN mapping is implemented on the customer-side port and replaces VLAN tags as follows: • Replaces the CVLAN with the SVLAN for the uplink traffic. •...
  • Page 162 Figure 56 One-to-two VLAN mapping implementation Zero-to-two VLAN mapping As shown in Figure 57, zero-to-two VLAN mapping is implemented on the customer-side port and processes VLAN tags as follows: • Adds double tags to untagged uplink traffic. • Removes SVLAN tags and CVLAN tags from downlink traffic. To ensure correct transmission of downlink traffic, use one of the following methods to sustain the SVLAN tag in the downlink traffic: •...
  • Page 163: Vlan Mapping Configuration Task List

    Figure 58 Two-to-two VLAN mapping implementation Two-to-three VLAN mapping As shown in Figure 59, two-to-three VLAN mapping is implemented on the customer-side port to add an outermost VLAN tag to double-tagged uplink traffic. For the downlink traffic to be correctly sent to the customer network, use one of the following methods to remove the outermost tag from the traffic: •...
  • Page 164: Configuring One-To-One Vlan Mapping

    Tasks at a glance Remarks PE 4, as shown in Figure 53, through which traffic from customer networks enters the service provider networks. Configuring zero-to-two VLAN mapping Configure two-to-two VLAN mapping on PE 3, as Configuring two-to-two VLAN mapping shown in Figure 53, which is an edge device of the SP 2 network.
  • Page 165: Configuring Zero-To-Two Vlan Mapping

    To configure one-to-two VLAN mapping: Step Command Remarks Enter system view. system-view • Enter Layer 2 Ethernet interface view: interface interface-type Enter Layer Ethernet interface-number interface view or Layer 2 • Enter Layer aggregate aggregate interface view. interface view: interface bridge-aggregation interface-number •...
  • Page 166: Configuring Two-To-Two Vlan Mapping

    Step Command Remarks aggregate interface view. interface-number • Enter Layer aggregate interface view: interface bridge-aggregation interface-number • Set the port link type to trunk: port link-type trunk By default, the link type of a Set the port link type. • port is access.
  • Page 167: Configuring Two-To-Three Vlan Mapping

    Step Command Remarks mapping. is configured on an interface. inner-vlan-id translated-vlan outer-vlan-id inner-vlan-id Configuring two-to-three VLAN mapping As a best practice, set the MTU to a minimum of 1508 bytes for ports on the forwarding path of the triple-tagged packet in the service provider network. To configure two-to-three VLAN mapping: Step Command...
  • Page 168: Vlan Mapping Configuration Examples

    Task Command Display VLAN mapping information. display vlan mapping [ interface interface-type interface-number ] VLAN mapping configuration examples One-to-one VLAN mapping configuration example Network requirements As shown in Figure • Each household subscribes to PC, VoD, and VoIP services, and obtains the IP address through DHCP.
  • Page 169 Figure 60 Network diagram DHCP client VLAN 1 Home gateway VLAN 2 VLAN 1 -> VLAN 101 VLAN 2 -> VLAN 201 VLAN 3 VoIP VLAN 3 -> VLAN 301 HGE1/0/1 HGE1/0/3 Wiring-closet Switch A VLAN 1 HGE1/0/2 VLAN 1 -> VLAN 102 DHCP server VLAN 2 ->...
  • Page 170: One-To-Two And Two-To-Two Vlan Mapping Configuration Example

    # Assign HundredGigE 1/0/1 to all original VLANs and translated VLANs. [SwitchA-HundredGigE1/0/1] port trunk permit vlan 1 2 3 101 201 301 # Configure one-to-one VLAN mappings on HundredGigE 1/0/1 to map VLANs 1, 2, and 3 to VLANs 101, 201, and 301, respectively. [SwitchA-HundredGigE1/0/1] vlan mapping 1 translated-vlan 101 [SwitchA-HundredGigE1/0/1] vlan mapping 2 translated-vlan 201 [SwitchA-HundredGigE1/0/1] vlan mapping 3 translated-vlan 301...
  • Page 171 • The two sites use different VPN access services from different service providers, SP 1 and SP • SP 1 assigns VLAN 100 to Site 1 and Site 2. SP 2 assigns VLAN 200 to Site 1 and Site 2. Configure one-to-two VLAN mappings and two-to-two VLAN mappings to enable the two branches to communicate across networks SP 1 and SP 2.
  • Page 172 # Create VLAN 100. <PE2> system-view [PE2] vlan 100 [PE2-vlan100] quit # Configure HundredGigE 1/0/1 as a trunk port. [PE2] interface hundredgige 1/0/1 [PE2-HundredGigE1/0/1] port link-type trunk # Assign HundredGigE 1/0/1 to VLAN 100. [PE2-HundredGigE1/0/1] port trunk permit vlan 100 [PE2-HundredGigE1/0/1] quit # Configure HundredGigE 1/0/2 as a trunk port.
  • Page 173 [PE4] interface hundredgige 1/0/1 [PE4-HundredGigE1/0/1] port link-type trunk # Assign HundredGigE 1/0/1 to VLAN 200. [PE4-HundredGigE1/0/1] port trunk permit vlan 200 [PE4-HundredGigE1/0/1] quit # Configure the customer-side port (HundredGigE 1/0/2) as a hybrid port. [PE4] interface hundredgige 1/0/2 [PE4-HundredGigE1/0/2] port link-type hybrid # Assign HundredGigE 1/0/2 to VLAN 6 as a tagged member.
  • Page 174: Configuring Lldp

    Configuring LLDP Overview In a heterogeneous network, a standard configuration exchange platform ensures that different types of network devices from different vendors can discover one another and exchange configuration. The Link Layer Discovery Protocol (LLDP) is specified in IEEE 802.1AB. The protocol operates on the data link layer to exchange device information between directly connected devices.
  • Page 175 LLDP frame formats LLDP sends device information in LLDP frames. LLDP frames are encapsulated in Ethernet II or Subnetwork Access Protocol (SNAP) frames. • LLDP frame encapsulated in Ethernet II Figure 63 Ethernet II-encapsulated LLDP frame Table 13 Fields in an Ethernet II-encapsulated LLDP frame Field Description MAC address to which the LLDP frame is advertised.
  • Page 176 Figure 64 SNAP-encapsulated LLDP frame Table 14 Fields in a SNAP-encapsulated LLDP frame Field Description MAC address to which the LLDP frame is advertised. It is the same as Destination MAC address that for Ethernet II-encapsulated LLDP frames. Source MAC address MAC address of the sending port.
  • Page 177 Table 15 Basic management TLVs Type Description Remarks Chassis ID Specifies the bridge MAC address of the sending device. Specifies the ID of the sending port: • If the LLDPDU carries LLDP-MED TLVs, the port ID Port ID TLV carries the MAC address of the sending port. Mandatory.
  • Page 178 Description Switches of this series do not support QCN TLVs. NOTE: • H3C devices support only receiving protocol identity TLVs and VID usage digest TLVs. • Layer 3 Ethernet ports support only link aggregation TLVs. • IEEE 802.3 organizationally specific TLVs Table 17 IEEE 802.3 organizationally specific TLVs...
  • Page 179: Working Mechanism

    Type Description VLAN ID of a port, the VLAN type, and the Layer 2 and Layer 3 priorities for specific applications. Allows a network device or terminal device to advertise power Extended Power-via-MDI supply capability. This TLV is an extension of the Power Via MDI TLV.
  • Page 180: Protocols And Standards

    the token bucket mechanism to rate limit LLDP frames. For more information about the token bucket mechanism, see ACL and QoS Configuration Guide. LLDP automatically enables the fast LLDP frame transmission mechanism in either of the following cases: • A new LLDP frame is received and carries device information new to the local device. •...
  • Page 181: Performing Basic Lldp Configurations

    Tasks at a glance TLVs Performing basic LLDP configurations Enabling LLDP To make LLDP take effect on specific ports, you must enable LLDP both globally and on these ports. To use LLDP together with OpenFlow, you must enable LLDP globally on OpenFlow switches. To prevent LLDP from affecting topology discovery of OpenFlow controllers, disable LLDP on ports of OpenFlow instances.
  • Page 182: Setting The Lldp Operating Mode

    Setting the LLDP operating mode Step Command Remarks Enter system view. system-view Enter Layer 2/Layer 3 Ethernet interface view, management Ethernet interface interface-type interface view, Layer interface-number 2/Layer aggregate interface view, physical interface view. By default: • The nearest bridge agent •...
  • Page 183: Configuring The Advertisable Tlvs

    Step Command Remarks Enter system view. system-view Enter Layer 2/Layer Ethernet interface view, management Ethernet interface interface-type interface view, Layer 2/Layer interface-number 3 aggregate interface view, or IRF physical interface view. • Layer 2/Layer Ethernet interface view or management Ethernet interface view: lldp [ agent { nearest-customer |...
  • Page 184 Step Command Remarks port-description system-capability system-description system-name management-address-tlv [ ipv6 ] [ ip-address ] } | dot1-tlv port-vlan-id link-aggregation } } • lldp agent nearest-customer tlv-enable { basic-tlv { all | port-description system-capability system-description system-name management-address-tlv [ ipv6 ] [ ip-address ] } | dot1-tlv port-vlan-id link-aggregation } } •...
  • Page 185: Configuring The Management Address And Its Encoding Format

    Step Command Remarks { ca-type ca-value }&<1-10> | organizationally specific elin-address tel-number } } } TLVs (only link aggregation TLV is supported). • lldp agent { nearest-nontpmr | nearest-customer } tlv-enable basic-tlv port-description system-capability system-description system-name management-address-tlv [ ipv6 ] [ ip-address ] } | dot1-tlv { all | link-aggregation } } •...
  • Page 186: Setting Other Lldp Parameters

    If a neighbor encodes its management address in string format, set the encoding format of the management address to string on the connecting port. This guarantees normal communication with the neighbor. To configure a management address to be advertised and its encoding format on a port: Step Command Remarks...
  • Page 187: Setting An Encapsulation Format For Lldp Frames

    By setting the TTL multiplier, you can configure the TTL of locally sent LLDPDUs. The TTL is expressed by using the following formula: TTL = Min (65535, (TTL multiplier × LLDP frame transmission interval + 1)) As the expression shows, the TTL can be up to 65535 seconds. TTLs greater than 65535 will be rounded down to 65535 seconds.
  • Page 188: Disabling Lldp Pvid Inconsistency Check

    Step Command Remarks nearest-nontpmr } encapsulation snap • physical interface view: lldp encapsulation snap Disabling LLDP PVID inconsistency check By default, when the system receives an LLDP packet, it compares the PVID value contained in packet with the PVID configured on the receiving interface. If the two PVIDs do not match, a log message will be printed to notify the user.
  • Page 189: Configuration Procedure

    Configuration procedure CDP-compatible LLDP operates in one of the following modes: • TxRx—CDP packets can be transmitted and received. • Rx—CDP packets can be received but cannot be transmitted. • Disable—CDP packets cannot be transmitted or received. To make CDP-compatible LLDP take effect on a port, follow these steps: Enable CDP-compatible LLDP globally.
  • Page 190: Dcbx Configuration Task List

    ETS Configuration. ETS Recommendation. PFC. APP. H3C devices can send these types of DCBX information to a server or storage adapter supporting FCoE. However, H3C devices cannot accept these types of DCBX information. DCBX configuration task list Tasks at a glance (Required.)
  • Page 191: Setting The Dcbx Version

    To enable LLDP and DCBX TLV advertising: Step Command Remarks Enter system view. system-view By default, LLDP is disabled Enable LLDP globally. lldp global enable globally. Enter Layer Ethernet interface interface-type interface view. interface-number By default, LLDP is enabled on an Enable LLDP.
  • Page 192 To configure the 802.1p-to-local priority mapping in the MQC method: Step Command Remarks Enter system view. system-view Create a traffic class, specify traffic classifier classifier-name the operator of the class as By default, no traffic class exists. operator or OR, and enter class view. Configure the class to match By default, no match criterion is packets with the specified...
  • Page 193: Configuring Pfc Parameters

    Step Command Remarks By default, byte-count WRR Enable WRR queuing. queuing is enabled on an qos wrr byte-count interface. • Add a queue to WRR priority group 1 and configure the scheduling weight queue: queue-id group Configure a queue. Use one or both commands. byte-count schedule-value •...
  • Page 194: Setting The Source Mac Address Of Lldp Frames

    Step Command Remarks Enter Layer 2/Layer 3 Ethernet interface view, management Ethernet interface view, Layer interface interface-type interface-number 2/Layer aggregate interface view, physical interface view. • In Layer 2/Layer 3 Ethernet interface view management Ethernet interface view: lldp [ agent { nearest-customer | nearest-nontpmr } ] notification remote-change enable •...
  • Page 195: Enabling The Device To Generate Arp Or Nd Entries For Received Management Address Lldp Tlvs

    Enabling the device to generate ARP or ND entries for received management address LLDP TLVs This feature enables the device to generate an ARP or ND entry for a received LLDP frame that carries a management address TLV. The ARP or ND entry contains the management address and the source MAC address of the frame.
  • Page 196: Basic Lldp Configuration Example

    Task Command port. { nearest-bridge | nearest-customer | nearest-nontpmr } ] Display types display lldp tlv-config [ interface interface-type interface-number ] [ agent advertisable optional LLDP { nearest-bridge | nearest-customer | nearest-nontpmr } ] TLVs. Basic LLDP configuration example Network requirements As shown in Figure 67, enable LLDP globally on Switch A and Switch B to perform the following...
  • Page 197: Verifying The Configuration

    <SwitchB> system-view [SwitchB] lldp global enable # Enable LLDP on HundredGigE 1/0/1. By default, LLDP is enabled on ports. [SwitchB] interface hundredgige 1/0/1 [SwitchB-HundredGigE1/0/1] lldp enable # Set the LLDP operating mode to Tx on HundredGigE 1/0/1. [SwitchB-HundredGigE1/0/1] lldp admin-status tx [SwitchB-HundredGigE1/0/1] quit Verifying the configuration # Verify the following items:...
  • Page 198 Polling interval : 0s Number of LLDP neighbors Number of MED neighbors Number of CDP neighbors Number of sent optional TLV : 16 Number of received unknown TLV : 0 LLDP status information of port 2 [HundredGigE1/0/2]: LLDP agent nearest-bridge: Port status of LLDP : Enable Admin status...
  • Page 199 The current number of CDP neighbors: 0 LLDP neighbor information last changed time: 0 days, 0 hours, 5 minutes, 20 seconds Transmit interval : 30s Fast transmit interval : 1s Transmit credit max Hold multiplier Reinit delay : 2s Trap interval : 30s Fast start times LLDP status information of port 1 [HundredGigE1/0/1]:...
  • Page 200 LLDP agent nearest-nontpmr: Port status of LLDP : Enable Admin status : Disable Trap flag : No MED trap flag : No Polling interval : 0s Number of LLDP neighbors Number of MED neighbors Number of CDP neighbors Number of sent optional TLV Number of received unknown TLV : 0 LLDP agent nearest-customer: Port status of LLDP...
  • Page 201: Configuring Service Loopback Groups

    Configuring service loopback groups A service loopback group contains one or multiple Ethernet ports for looping packets sent out by the device back to the device. This feature must work with other features, such as GRE. A service loopback group provides one of the following services: •...
  • Page 202: Service Loopback Group Configuration Example

    Task Command Display information about service loopback groups. display service-loopback group [ group-id ] Service loopback group configuration example Network requirements All Ethernet ports on Device A support the tunnel service. Assign HundredGigE 1/0/1 through HundredGigE 1/0/3 to a service loopback group to loop GRE packets sent out by the device back to the device.
  • Page 203: Index

    Index MAC address table entry (on interface), Numerics MAC address table multiport unicast entry, 0:2 VLAN mapping address application scenario, 147, 149 MAC address learning disable, configuration, MAC Information queue length, implementation, 149, 151 advertising 1:1 VLAN mapping LLDP advertisable TLV, application scenario, 147, 147 LLDP+DCBX TLV advertisement,...
  • Page 204 MAC address table entry, block action (loop detection), LLDP CDP compatibility, boundary port (MST), checking BPDU spanning tree No Agreement Check, 115, 117 configuration BPDUs, choosing MST region max hops, Ethernet link aggregation reference port, 39, 42 MSTP BPDU protocol frames, Cisco PVST BPDU guard, Discovery Protocol.
  • Page 205 Ethernet link aggregation group (Layer 2 PVST, 97, 128 dynamic), RSTP, Ethernet link aggregation group (Layer 2 service loopback group, 190, 191 static), spanning tree, 75, 96, 125 Ethernet link aggregation group (Layer 3 spanning tree BPDU guard, dynamic), spanning tree BPDU transmission rate, Ethernet link aggregation group (Layer 3 spanning tree device priority, static),...
  • Page 206 Bridging Exchange Protocol. Use DCBX LLDP PVID inconsistency check, Ethernet. Use DCE MAC address learning (global), DCBX MAC address learning (on interface), configuration, spanning tree inconsistent PVID protection, LLDP DCBX version configuration, discarding LLDP ETS parameter configuration, MST discarding port state, LLDP PFC parameter configuration, displaying LLDP+DCBX TLV advertisement,...
  • Page 207 Ethernet interface loopback testing, MAC Information configuration, 33, 34 Ethernet link aggregation traffic redirection, port isolation configuration, 72, 73 LLDP, port-based VLAN assignment (access port), LLDP ARP entry generation, port-based VLAN assignment (hybrid port), LLDP polling, port-based VLAN assignment (trunk port), LLDP+DCBX TLV advertisement, port-based VLAN configuration, loop detection (global),...
  • Page 208 aggregate interface configuration, reference port, aggregate interface default settings, reference port choice, aggregate interface shutdown, static mode, aggregation group, traffic redirection, aggregation group restrictions, traffic redirection restrictions, basic concepts, Ethernet subinterface, See also Ethernet interface, Layer 2 Ethernet subinterface, Layer 3 Ethernet BFD configuration, subinterface BFD configuration restrictions,...
  • Page 209 MAC address table multiport unicast entry, ignored VLAN MAC Information configuration, 33, 34 Layer 2 aggregate interface, MSTP BPDU protocol frames, implementing port-based VLAN frame handling, 0:2 VLAN mapping, 149, 151 PVST BPDU protocol frames, 86, 86 1:1 VLAN mapping, 149, 150 RSTP BPDU protocol frames, 1:2 VLAN mapping,...
  • Page 210 LACP Ethernet link aggregation group load sharing, Ethernet link aggregation, Ethernet link aggregation group load sharing mode, Ethernet link aggregation group restrictions, Virtual Local Area Network. Use VLAN Ethernet link aggregation LACP, LAN switching Ethernet link aggregation load sharing (Layer 0:2 VLAN mapping configuration, 1:1 VLAN mapping configuration, 153, 157...
  • Page 211 VLAN mapping display, Ethernet link aggregation edge aggregate interface, 44, 51 VLAN port-based configuration, Ethernet link aggregation group, 45, 46 VLAN protocols and standards, Ethernet link aggregation group load sharing, Layer 2 Ethernet link aggregation group load sharing Ethernet aggregate interface (MAC mode, address), Ethernet link aggregation load sharing,...
  • Page 212 CDP compatibility configuration, Ethernet link aggregation group load sharing, configuration, 163, 169 Ethernet link aggregation load sharing (Layer DCBX configuration, Ethernet link aggregation load sharing (Layer DCBX version configuration, disabling PVID inconsistency check, Ethernet link aggregation load sharing mode, display, Ethernet link aggregation local-first load enable, sharing,...
  • Page 213 display, MED (LLDP-MED trapping), dynamic aging timer, entry configuration, LLDP basic configuration, 170, 185 entry configuration (global), LLDP configuration, 163, 169 entry configuration (on interface), mode entry creation, Ethernet interface link, entry types, Ethernet link aggregation dynamic, 39, 40 learning enable, Ethernet link aggregation LACP operation active, MAC address learning disable,...
  • Page 214 IST, Ethernet interface storm control (Layer 2), mode set, Ethernet interface storm suppression, MST region, Ethernet link aggregate interface (Layer 2 edge), MST region configuration, Ethernet link aggregation (dynamic mode), MSTI, Ethernet link aggregation (Layer 2 dynamic), MSTI calculation, Ethernet link aggregation (Layer 2 static), port roles, Ethernet link aggregation (Layer 3 dynamic), port states,...
  • Page 215 management Ethernet interface spanning tree TC-BPDU transmission configuration, restriction, MST region configuration, STP algorithm calculation, MSTP basic concepts, STP basic concepts, MSTP configuration, STP path cost, port isolation group assignment (multiple VLAN basic configuration, ports), VLAN interface, port-based VLAN assignment (access VLAN mapping 0:2 implementation, port), VLAN mapping 1:1 implementation,...
  • Page 216 P/A transition (STP), Ethernet link aggregation (dynamic mode), packet Ethernet link aggregation (Layer 2 dynamic), 0:2 VLAN mapping configuration, Ethernet link aggregation (Layer 2 static), 1:1 VLAN mapping configuration, 153, 157 Ethernet link aggregation (Layer 3 dynamic), 1:2 VLAN mapping configuration, 153, 159 Ethernet link aggregation (Layer 3 static), 2:2 VLAN mapping configuration,...
  • Page 217 LLDP operating mode, STP root port rapid transition, LLDP polling, VLAN port link type, LLDP reinitialization delay, port isolation LLDP Rx operating mode, configuration, 72, 73 LLDP Tx operating mode, display, LLDP TxRx operating mode, group assignment (multiple ports), loop detection configuration, 132, 134, 136 port-based VLAN loop detection enable (port-specific),...
  • Page 218 configuring Ethernet aggregate interface configuring Ethernet subinterface basic (Layer 3 edge), settings, configuring Ethernet interface (Layer 2), configuring interface (inloopback), configuring Ethernet interface (Layer 3), configuring interface (loopback), configuring Ethernet interface basic settings, configuring interface (null), configuring Ethernet interface dampening, configuring LLDP, configuring Ethernet interface generic flow configuring LLDP 802.1p-to-local priority...
  • Page 219 configuring spanning tree port mode for MSTP enabling LLDP, frames, enabling LLDP ARP entry generation, configuring spanning tree port path enabling LLDP polling, cost, 105, 108 enabling LLDP+DCBX TLV advertisement, configuring spanning tree port priority, enabling loop detection (global), configuring spanning tree port role enabling loop detection (port-specific), restriction, enabling MAC address synchronization,...
  • Page 220 setting Ethernet link aggregate group spanning tree inconsistent PVID protection Selected ports min/max, disable, setting Ethernet link aggregate interface PVID (port-based VLAN), (expected bandwidth), PVST, See also setting Ethernet link aggregation load sharing basic concepts, mode (global), configuration, 97, 128 setting Ethernet link aggregation load sharing feature enable, mode (group-specific),...
  • Page 221 Ethernet link aggregation BFD service loopback group configuration, configuration, 190, 191 Ethernet link aggregation group, display, Ethernet link aggregation traffic redirection, setting Layer 2 Ethernet interface storm control Ethernet aggregate interface (MAC address), configuration, Ethernet interface MTU (Layer 3), MAC Information configuration, Ethernet interface statistics polling interval, spanning tree port role restriction, Ethernet link aggregate group Selected ports...
  • Page 222 BPDU transparent transmission (on port), Ethernet link aggregation group, 45, 46 configuration, 75, 96, 125 Ethernet link aggregation group BFD, device priority configuration, Ethernet link aggregation mode, Digest Snooping, 113, 114 Layer 2 Ethernet link aggregation group, display, Layer 3 Ethernet link aggregation group, edge port configuration, MAC address table entry, feature enable,...
  • Page 223 SVLAN STP hello, VLAN mapping application scenario, STP max age, VLAN mapping configuration, 147, 152, 157 VLAN mapping implementation, LLDP advertisable TLV configuration, switching LLDP management address configuration, Ethernet interface configuration, LLDP management address encoding format, interface configuration (inloopback), 16, 17 LLDP parameters, interface configuration (loopback), 16, 16...
  • Page 224 port isolation configuration, 72, 73 port link type, port-based configuration, 142, 145 port-based VLAN assignment (access port), port-based VLAN assignment (hybrid port), port-based VLAN assignment (trunk port), port-based VLAN frame handling, protocols and standards, PVID, PVST, spanning tree inconsistent PVID protection disable, termination.

Table of Contents