R3166-R3206-HP High-End Firewalls Network Management Configuration Guide-6PW101

79
Follow these steps to perform mCheck in interface view:
To do... Use the command...
Remarks
Enter system view system-view —
Enter Ethernet interface
view or Layer 2
aggregate interface
view
interface interface-type interface-number —
Perform mCheck stp mcheck Required
NOTE:
A
n mCheck operation takes effect on a device that operates in MSTP or RSTP mode.
Configuring Digest Snooping
As defined in IEEE 802.1s, interconnected devices are in the same region only when their MST
region-related configurations (region name, revision level, and VLAN-to-instance mappings) are
identical. A spanning tree device identifies devices in the same MST region by checking the configuration
ID in BPDU packets. The configuration ID includes the region name, revision level, and configuration
digest that is in 16-byte length and is the result calculated via the HMAC-MD5 algorithm based on
VLAN-to-instance mappings.
Spanning tree implementations vary with vendors, and the configuration digests calculated using private
keys is different, so devices of different vendors in the same MST region cannot communicate with each
other.
To enable communication between an HP device and a third-party device, enable the Digest Snooping
feature on the port connecting the HP device to the third-party device in the same MST region.
NOTE:
Before enabling Digest Snooping, ensure that associated devices of different vendors are connected and
run spanning tree protocols.
1. Configuring the Digest Snooping feature
You can enable Digest Snooping only on the HP device that is connected to a third-party device that uses
its private key to calculate the configuration digest.
Follow these steps to configure Digest Snooping:
To do... Use the command...
Remarks
Enter system view system-view —
Enter interface view or
Layer 2 aggregate
interface view
interface interface-type interface-number
—
Enable global Digest
Snooping
stp config-digest-snooping
Required
Disabled by default.