Configuration Procedure; Configuration Example - H3C LS-3100-52P-OVS-H3 Operation Manual

Configuration Procedure

Follow these steps to configure Digest Snooping:
To do...
Enter system view
Enter interface
view or port
group view
Enable digest snooping on the
interface or port group
Return to system view
Enable global digest snooping
You can enable Digest Snooping on only a device that is connected to another vendor's device that
uses its private key to calculate the configuration digest.
With the Digest Snooping feature enabled, comparison of configuration digest is not needed for
in-the-same-region check, so the VLAN-to-MSTI mappings must be the same on associated ports.
With global Digest Snooping enabled, modification of VLAN-to-MSTI mappings and removing of
the current region configuration using the undo stp region-configuration command are not
allowed. You can only modify the region name and revision level.
You need to enable this feature both globally and on associated ports to make it take effect. It is
recommended to enable the feature on all associated ports first and then globally, making all
configured ports take effect, and disable the feature globally to disable it on all associated ports.
It is not recommended to enable Digest Snooping on MST region edge ports to avoid loops.
It is recommended to enable Digest Snooping first and then MSTP. Do not configure Digest
Snooping when the network works well to avoid traffic interruption.

Configuration Example

Network requirements
Device A and Device B connect to a third-party's device and all the devices are in the same region.
Enable Digest Snooping on Device A and Device B so that the three routers can communicate with
one another.
Use the command...
system-view
Enter Ethernet
interface view
interface interface-type
or Layer-2
interface-number
aggregate
interface view
Enter port port-group manual
group view port-group-name
stp config-digest-snooping
quit
stp config-digest-snooping
1-33
Remarks
—
Required
Use either command.
Configurations made in
interface view will take effect on
the current port only;
configurations made in port
group view will take effect on all
ports in the port group.
Required
Not enabled by default
—
Required
Not enabled by default