R3721-F3210-F3171-HP High-End Firewalls Network Management Configuration Guide-6PW101

77
VLAN 10 and VLAN 30 are terminated on the distribution layer devices, and VLAN 40 is terminated on
the access layer devices, so the root bridges of MSTI 1 and MSTI 3 are Firewall and Device A respectively,
and the root bridge of MSTI 4 is Device B.
Figure 49 Network diagram
Configuration procedure
1. Configure the VLANs and VLAN member ports. (Details not shown.)
Create VLAN 10, VLAN 20, and VLAN 30 on Firewall and Device A respectively, create VLAN 10,
VLAN 20, and VLAN 40 on Device B, and create VLAN 20, VLAN 30, and VLAN 40 on Device
C; configure the ports on these devices as hybrid ports and assign them to related VLANs;
configure the security zones to which the combinations of these ports and their permitted VLANs
belong.
2. Configure Firewall:
# Enter MST region view, configure the MST region name as example, map VLAN 10, VLAN 30,
and VLAN 40 to MSTI 1, MSTI 3, and MSTI 4 respectively, and configure the revision level of the
MST region as 0.
{ Log in to Device A. Select Network > MSTP > Region from the navigation tree, click Modify,
and make the following configurations on the page shown in Figure 50.
Permit: all VLANs
P
e
r
mi
t
:
V
L
A
N
s
2
0
a
n
d
3
0
P
e
r
mi
t
:
V
L
A
N
s
1
0
a
n
d
2
0
Permit: VLANs 20 and 40
Permit: VLANs 20 and
30
Permit: VLANs 10 and
20
Device B Device C
Firewall
G
E
0
/
2
GE0/3
G
E
0
/
2
GE0/3
GE0/3
GE
0
/
2
G
E
0
/
2
GE0/3
MSTP region
Device A