R3166-R3206-HP High-End Firewalls Network Management Configuration Guide-6PW101

If the upstream device is a third-party device, the rapid state transition implementation may be limited.

For example, when the upstream device uses a rapid transition mechanism similar to that of RSTP, and the

downstream device adopts MSTP and does not work in RSTP mode, the root port on the downstream

device receives no agreement packet from the upstream device and sends no agreement packets to the

upstream device. As a result, the designated port of the upstream device fails to transit rapidly and can

only change to the forwarding state after a period twice the Forward Delay.

You can enable the No Agreement Check feature on the downstream device’s port to enable the

designated port of the upstream device to transit its state rapidly.

1. Configuration Prerequisites

Before you configure the No Agreement Check function, complete the following tasks:

• Connect a device to a third-party upstream device supporting spanning tree protocols via a

point-to-point link.

• Configure the same region name, revision level and VLAN-to-instance mappings on the two devices,

assigning them to the same region.

2. Configuring the No Agreement Check function

To make the No Agreement Check feature take effect, enable it on the root port.

Follow these steps to configure No Agreement Check:

To do... Use the command...

Remarks

Enter system view system-view —

Enter interface or Layer

2 aggregate interface

view

interface interface-type interface-number

—

Enable No Agreement

Check

stp no-agreement-check

Required

Disabled by default.

3. No Agreement Check configuration example

a. Network requirements

As shown in Figure 38:

• F

irewall connects to a third-party device that has a different spanning tree implementation. Both

devices are in the same region.

• The third-party device (Device) is the regional root bridge, and Firewall is the downstream device.

Figure 38 No Agreement Check configuration

b. Configuration procedure

# Enable No Agreement Check on GigabitEthernet 0/1 of Firewall.

<Firewall> system-view

[Firewall] interface GigabitEthernet 0/1