HP 5500 Ei 5500 Si Switch Series Configuration Guide

 100 
Step Command Remarks 
2.  Enter interface view or port 
group view. 
• Enter Layer 2 Ethernet interface view 
or Layer 2 aggregate interface view:
 
interface interface-type 
interface-number  
• Enter port group view:  
port-group manual  port-group-name Use either command.
 
3.  Enable the loop guard 
function for the ports.  stp loop-protection 
Disabled by default.
 
 
 NOTE: 
•  Do not enable loop guard on a port that connects user terminals. Otherwise, the port will stay in the 
discarding...

 101 
all the devices in the network perform STP calculations all the time. As a result, problems such as CPU 
overload and BPDU protocol status errors occur. 
To avoid this problem, you can enable BPDU drop on ports. A BPDU drop-enabled port does not receive 
any BPDUs and is invulnerable to forged BPDU attacks. 
To enable BPDU drop on an Ethernet interface: 
 
Step Command Remarks 
1.  Enter system view. 
system-view  N/A 
2.  Enter Layer 2 Ethernet 
interface view.   interface
 interface-type...

 102 
Task Command Remarks 
Clear the spanning tree statistics. reset stp [ interface  interface-list  ]  Available in user view 
 
Spanning tree configuration examples 
MSTP configuration example 
Network requirements 
As shown in  Figure 28: 
•   A
ll devices on the network are in the same MST region. Device A and Device B work at the 
distribution layer. Device C and Device D work at the access layer.  
•   Configure MSTP so that packets of different VLANs are forwarded along different spanning trees:...

 103 
 system-view 
[DeviceA] stp region-configuration 
[DeviceA-mst-region] region-name example 
[DeviceA-mst-region] instance 1 vlan 10 
[DeviceA-mst-region] instance 3 vlan 30 
[DeviceA-mst-region] instance 4 vlan 40 
[DeviceA-mst-region] revision-level 0 
# Activate MST region configuration. 
[DeviceA-mst-region] active region-configuration 
[DeviceA-mst-region] quit 
# Specify the current device as the root bridge of MSTI 1. 
[DeviceA] stp instance 1 root primary 
# Enable the spanning tree feature...

 104 
# Specify the current device as the root bridge of MSTI 4. 
[DeviceC] stp instance 4 root primary 
# Enable the spanning tree feature globally. 
[DeviceC] stp enable 
5. Configure Device D: 
# Enter MST region view, configure the MST region name as  example, map VLAN 10, VLAN 30, 
and VLAN 40 to MSTI 1, MSTI 3, and MSTI 4, resp ectively, and configure the revision level of the 
MST region as 0. 
 system-view 
[DeviceD] stp region-configuration 
[DeviceD-mst-region] region-name example...

 105 
   0        GigabitEthernet1/0/1         DESI  FORWARDING    NONE 
   0        GigabitEthernet1/0/2         ROOT  FORWARDING    NONE 
   0        GigabitEthernet1/0/3         DESI  FORWARDING    NONE 
   1        GigabitEthernet1/0/1         ROOT  FORWARDING    NONE 
   1        GigabitEthernet1/0/2         ALTE  DISCARDING    NONE 
   4        GigabitEthernet1/0/3         DESI  FORWARDING    NONE 
# Display brief spanning tree information on Device D. 
[DeviceD] display stp brief 
 MSTID      Port...

 106 
•  VLAN 10, VLAN 20, and VLAN 30 are terminated on the distribution layer devices, and VLAN 40 
is terminated on the access layer devices. The root bridge of VL AN 10 and VL AN 20 is Device A, 
that of VLAN 30 is Device B, and that of VLAN 40 is Device C. 
Figure 30  Network diagram 
 
 
Configuration procedure 
1. Configure VLANs and VLAN member ports. (Details not shown.) 
Create VLAN 10, VLAN 20, and VLAN 30 on Devi ce A and Device B, respectively, VLAN 10, 
VLAN 20, and VLAN 40 on Device C, and...

 107 
# Specify the current device as the root bridge of VLAN 40. 
[DeviceC] stp vlan 40 root primary 
# Enable the spanning tree feature globally and for VLANs 10, 20, and 40. 
[DeviceC] stp enable 
[DeviceC] stp vlan 10 20 40 enable 
5. Configure Device D: 
# Set the spanning tr ee mode to PVST. 
 system-view 
[DeviceD] stp mode pvst 
# Enable the spanning tree feature globally and for VLANs 20, 30, and 40. 
[DeviceD] stp enable 
[DeviceD] stp vlan 20 30 40 enable 
6. Verify the configurations: 
You...

 108 
 VLAN      Port                         Role  STP State     Protection 
   20      GigabitEthernet1/0/1         ALTE  FORWARDING    NONE 
   20      GigabitEthernet1/0/2         ROOT  DISCARDING    NONE 
   20      GigabitEthernet1/0/3         ALTE  DISCARDING    NONE 
   30      GigabitEthernet1/0/1         ROOT  FORWARDING    NONE 
   30      GigabitEthernet1/0/2         ALTE  DISCARDING    NONE 
   40      GigabitEthernet1/0/3         ROOT  FORWARDING    NONE 
Based on the output, you can draw...

 109 
Configuring BPDU tunneling 
Overview 
As a Layer 2 tunneling technology, BPDU tunneling enables Layer 2 protocol packets from 
geographically dispersed customer networks to be transparently transmitted over specific tunnels across 
a service provider network.  
Background 
Dedicated lines are used in a service provider network to build user-specific Layer 2 networks. As a result, 
a user network consists of parts lo cated at different sides of the service provider network. As shown 
in  Figure 32 ,...