R3721-F3210-F3171-HP High-End Firewalls Network Management Configuration Guide-6PW101

104
VLAN 10 and VLAN 30 are terminated on the distribution layer devices, and VLAN 40 is terminated on
the access layer devices, so the root bridges of MSTI 1 and MSTI 3 are Device A and Device B
respectively, and the root bridge of MSTI 4 is Device C.
Figure 57 Network diagram
Configuration procedure
1. Configure VLANs and VLAN member ports. (Details not shown.)
Create VLAN 10, VLAN 20, and VLAN 30 on Device A and Device B respectively, VLAN 10,
VLAN 20, and VLAN 40 on Device C, and VLAN 20, VLAN 30, and VLAN 40 on Device D.
Configure the ports on these devices as trunk ports and assign them to related VLANs.
2. Configure Device A:
# Enter MST region view, configure the MST region name as example, map VLAN 10, VLAN 30,
and VLAN 40 to MSTI 1, MSTI 3, and MSTI 4 respectively, and configure the revision level of the
MST region as 0.
<DeviceA> system-view
[DeviceA] stp region-configuration
[DeviceA-mst-region] region-name example
[DeviceA-mst-region] instance 1 vlan 10
[DeviceA-mst-region] instance 3 vlan 30
[DeviceA-mst-region] instance 4 vlan 40
[DeviceA-mst-region] revision-level 0
# Activate MST region configuration.
[DeviceA-mst-region] active region-configuration
[DeviceA-mst-region] quit
# Specify the current device as the root bridge of MSTI 1.
[DeviceA] stp instance 1 root primary
# Enable the spanning tree feature globally.
[DeviceA] stp enable
3. Configure Device B:
Permit: all VLANs
P
e
r
m
i
t:
V
L
A
N
s
2
0
a
n
d
3
0
P
e
r
mi
t
:
V
L
A
N
s
1
0
a
n
d
2
0
Permit: VLANs 20 and 40
Permit: VLANs 20 and
30
Permit: VLANs 10 and
20
Device A Device B
Device C Device D
GE0/3
G
E
0
/
2
GE0/3
G
E
0
/
2
GE0/3 GE0/3
G
E
0
/
2
G
E
0
/
2
MST region