Page 2
All other trademarks and trade names mentioned in this document are the property of their respective holders. Notice The purchased products, services and features are stipulated by the contract made between Huawei and the customer. All or part of the products, services and features described in this document may not be within the purchase scope or the usage scope.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching About This Document About This Document Intended Audience This document describes how to configure the components for LAN services, including link aggregation groups, VLANs, voice VLANs, MAC address tables, transparent bridging, as well as GVRP, STP/RSTP, and MSTP protocols.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching About This Document Symbol Description Indicates a potentially hazardous situation which, if not avoided, could result in equipment damage, data loss, performance deterioration, or unanticipated results. NOTICE is used to address practices not related to personal injury.
Page 5
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching About This Document Security Conventions Password setting – When configuring a password, the cipher text is recommended. To ensure device security, change the password periodically. – When you configure a password in plain text that starts and ends with %@%@ (the password can be decrypted by the device), the password is displayed in the same manner as the configured one in the configuration file.
Page 6
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching Contents Contents About This Document........................ii 1 MAC Address Table Configuration...................1 1.1 Introduction to the MAC Address..........................2 1.2 Principles..................................2 1.2.1 MAC Address Table..............................2 1.2.2 Disabling MAC Address Learning and Limiting the Number of MAC Addresses............4 1.2.3 Port Security................................5...
Page 7
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching Contents 1.9 Reference..................................29 2 Link Aggregation Configuration....................30 2.1 Introduction to Link Aggregation..........................31 2.2 Principles..................................31 2.2.1 Concepts..................................31 2.2.2 Forwarding Principle..............................33 2.2.3 Link Aggregation in Manual Load Balancing Mode....................33 2.2.4 Link Aggregation in LACP Mode..........................33 2.2.5 Load Balancing Using Link Aggregation........................39...
Page 8
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching Contents 2.9 Common Configuration Errors.............................68 2.9.1 Traffic Is Unevenly Load Balanced Among Eth-Trunk Member Interfaces Because the Load Balancing Mode Is Incorrect....................................68 2.10 References..................................68 3 VLAN Configuration........................70 3.1 Introduction to VLAN..............................71 3.2 Principles..................................72...
Page 11
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching Contents 6.6.4.5 Checking the Configuration..........................209 6.6.5 Setting Parameters for Interoperation Between Huawei and Non-Huawei Devices..........209 6.7 Maintaining STP/RSTP..............................211 6.7.1 Clearing STP/RSTP Statistics..........................211 6.7.2 Monitoring STP/RSTP Topology Change Statistics....................211 6.8 Configuration Examples.............................211 6.8.1 Example for Configuring Basic STP Functions......................212...
Page 12
7.6.3.3 Configuring Root Protection on an Interface.......................261 7.6.3.4 Configuring Loop Protection on an Interface.......................261 7.6.3.5 Checking the Configuration..........................262 7.6.4 Configuring MSTP Interoperability Between Huawei Devices and Non-Huawei Devices........262 7.6.4.1 Configuring a Proposal/Agreement Mechanism....................262 7.6.4.2 Configuring the MSTP Protocol Packet Format on an Interface................263 7.6.4.3 Enabling the Digest Snooping Function.......................264...
Page 13
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching Contents 8.5.3 Configuring SEP Multi-Instance..........................309 8.5.4 Configuring the Topology Change Notification Function..................311 8.5.4.1 Reporting Topology Changes in a Lower-Layer Network - SEP Topology Change Notification.......311 8.5.4.2 Checking the Configuration..........................313 8.6 Maintaining SEP.................................313...
Page 14
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching Contents 9.6.3.5 (Optional) Configuring VLAN ID Transparent Transmission................371 9.6.3.6 (Optional) Configuring a MAC Address Table for a Bridge Group..............372 9.6.3.7 Checking the Configuration..........................373 9.6.4 Configuring Remote Bridging Integrated with IP Routing..................373 9.6.4.1 Creating a Bridge Group............................373...
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 1 MAC Address Table Configuration MAC Address Table Configuration About This Chapter This chapter provides the basics for MAC address table, configuration procedure, and configuration examples. 1.1 Introduction to the MAC Address This section describes the concept of the MAC address.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 1 MAC Address Table Configuration 1.1 Introduction to the MAC Address This section describes the concept of the MAC address. A Media Access Control (MAC) address defines the location of a network device. A MAC address consists of 48 bits and is displayed as a 12-digit hexadecimal number.
Page 17
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 1 MAC Address Table Configuration The blackhole entry is used to discard the frame with the specified source MAC address or destination MAC address. Users manually set the blackhole entries and send them to each SIC.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 1 MAC Address Table Configuration Figure 1-1 Aging of MAC addresses MAC Address VLANID Port MAC1 Port1 MAC2 Port2 MAC3 Port3 Swtich Port2 Port1 Port3 MAC3 MAC1 VLAN10 Type Data As shown in the preceding figure, the aging time of MAC addresses is set to T.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 1 MAC Address Table Configuration Disabling MAC address learning on an interface or a VLAN Limiting the number of MAC addresses on an interface or a VLAN After MAC address learning is disabled on an interface or a VLAN, no MAC address entry can be learned on the interface or VLAN.
Page 20
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 1 MAC Address Table Configuration addresses flap in a short time on the network, MAC address flapping is caused by loops. When a loop occurs and causes a broadcast storm, MAC address flapping occurs on each switch affected by the broadcast storm.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 1 MAC Address Table Configuration 1.3 Application Environment This section describes the applicable environment of MAC address flapping. MAC Address Flapping Detection As shown in Figure 1-3, a loop occurs on a user network because network cables between two LSWs are incorrectly connected.
Page 22
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 1 MAC Address Table Configuration Table 1-1 Configuration task summary of MAC address table Item Description Task Configuring the MAC This section describes 1.6.1 Configuring the MAC Address Table...
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 1 MAC Address Table Configuration Item Description Task Configuring the Switch to A faulty device may send 1.6.4 Configuring the Discard Packets with an packets with an all-zero Router to Discard Packets...
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 1 MAC Address Table Configuration 1.6.1.1 Configuring a Static MAC Address Entry Context To ensure communication security, you can configure MAC addresses of trusted upstream devices or users as static MAC address entries. When there are few trusted users, configure static MAC address entries to ensure security.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 1 MAC Address Table Configuration 1.6.1.3 Setting the Aging Time of Dynamic MAC Address Entries Context The network topology changes frequently, and the industrial switch router will learn many MAC addresses.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 1 MAC Address Table Configuration By default, the industrial switch router performs the forward action after MAC address learning is disabled. That is, the industrial switch router forwards packets according to the MAC address table.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 1 MAC Address Table Configuration Run: mac-limit maximum max-num The maximum number of MAC address entries learned by the interface is set. By default, the number of MAC address entries learned on an interface is not limited.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 1 MAC Address Table Configuration Run the display mac-address static command to check static MAC address entries. Run the display mac-address dynamic command to check dynamic MAC address entries.
Page 29
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 1 MAC Address Table Configuration Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: interface interface-type interface-number The interface view is displayed. Step 3 Run: port-security enable Port security is enabled.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 1 MAC Address Table Configuration 1.6.2.2 Configuring the Sticky MAC Function on an Interface Context If a network requires high access security, you can configure port security on specified interfaces.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 1 MAC Address Table Configuration l protect: discards packets with new source MAC addresses when the number of learned MAC addresses reaches the limit. l restrict: discards packets with new source MAC addresses and sends an alarm when the number of learned MAC addresses exceeds the limit.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 1 MAC Address Table Configuration A VLAN is created and the VLAN view is displayed. Step 3 Run: loop-detect eth-loop { [ block-mac ] block-time block-time retry-times retry-times | alarm-only } MAC address flapping detection is configured in the VLAN.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 1 MAC Address Table Configuration system-view The system view is displayed. Step 2 Run: drop illegal-mac enable The industrial switch router is configured to discard packets with an all-0 MAC address.
Page 34
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 1 MAC Address Table Configuration To prevent hackers from stealing user information by forging the MAC address of the server, configure a static MAC address entry on the Router for the server.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 1 MAC Address Table Configuration Step 2 Set the aging time for the dynamic MAC address entries. [Router] mac-address aging-time 500 Step 3 Verify the configuration. # Run the display mac-address command in any view to check whether the static MAC address entries are successfully added to the MAC address table.
Page 36
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 1 MAC Address Table Configuration Figure 1-5 Network diagram of port security configuration Internet Router Eth2/0/1 VLAN 10 Switch Configuration Roadmap The configuration roadmap is as follows: Create a VLAN and set the link type of the interface to trunk.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 1 MAC Address Table Configuration [Router-Ethernet2/0/1] port-security protect-action protect # Set the maximum number of MAC addresses that can be learned on the interface. [Router-Ethernet2/0/1] port-security max-mac-num 4 # To enable the port security function on other interfaces, repeat the preceding steps.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 1 MAC Address Table Configuration Step 2 Verify the configuration. # Run the display mac-limit command in any view to check whether the MAC address limiting rule is successfully configured.
Page 41
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 1 MAC Address Table Configuration ------------------------------------------------------------------------------- Total items displayed = 1 If not, re-configure the binding relationships between the MAC address, VLAN, and interface. If yes, go to step 2.
Page 42
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 1 MAC Address Table Configuration 0001-0001-0001 3333/- blackhole ------------------------------------------------------------------------------ Total items displayed = 1 If a blackhole MAC address entry is displayed, run the undo mac-address blackhole command to delete it.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 1 MAC Address Table Configuration – Run the port-security enable command on the interface to enable port security or run the mac-limit command to set the maximum number of MAC addresses that the interface can learn to 1.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 2 Link Aggregation Configuration Link Aggregation Configuration About This Chapter Link aggregation is a technology that bundles multiple Ethernet links into a logical link to increase bandwidth, improve reliability, and load balance traffic.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 2 Link Aggregation Configuration 2.1 Introduction to Link Aggregation This section describes definition and purpose of link aggregation. Definition Ethernet link aggregation, also called Eth-Trunk, bundles multiple physical links to form a logical link to increase link bandwidth.
Page 46
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 2 Link Aggregation Configuration Figure 2-1 Eth-Trunk networking Eth-Trunk DeviceA DeviceB The link aggregation interface can be used as a common Ethernet interface to implement routing protocols and other services. Unlike a common Ethernet interface, the link aggregation interface needs to select one or more member interfaces to forward traffic.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 2 Link Aggregation Configuration 2.2.2 Forwarding Principle The Eth-Trunk forwarding table is composed of the following entries: HASH-KEY value The key value is calculated through the hash algorithm based on the MAC address or IP address in a data packet.
Page 48
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 2 Link Aggregation Configuration The Link Aggregation Control Protocol (LACP) can improve fault tolerance of the Eth-Trunk, provide backup, and ensure high reliability of member links. LACP uses a standard negotiation mechanism for a switching device so that the switching device can create and start the aggregated link based on its configuration.
Page 49
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 2 Link Aggregation Configuration If one of M links fails, LACP selects a link from N backup links to replace the faulty link. The actual bandwidth of the aggregated link is still the sum of M links' bandwidth, but the maximum bandwidth of the aggregated link is the sum of the (M+N-1) links' bandwidth.
Page 50
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 2 Link Aggregation Configuration Figure 2-5 Fields in an LACPDU Destination Address Source Address Length/Type Subtype=LACP Version Number TLV_type=Actor Information Actor_Information_Length=20 Actor_System_Priority Actor_System Actor_Key Actor_Port_Priority Actor_Port Actor_State Reserved TLV_type=Partner Information...
Page 51
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 2 Link Aggregation Configuration An Eth-Trunk in LACP mode is set up as follows: Devices at both ends send LACPDUs to each other. As shown in Figure 2-6, you need to create an Eth-Trunk in LACP mode on DeviceA and DeviceB and add member interfaces to the Eth-Trunk.
Page 52
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 2 Link Aggregation Configuration As shown in Figure 2-8, Port 1, Port 2, and Port 3 are member interfaces of an Eth-Trunk; DeviceA acts as the Actor; the upper threshold for the number of active interfaces is 2;...
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 2 Link Aggregation Configuration Select the backup link with the highest priority among N backup links to replace the faulty active link. The highest priority backup link becomes the active link and begins forwarding data.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 2 Link Aggregation Configuration Figure 2-9 Link aggregation networking Core Network PE-AGG Eth-Trunk 1 …… …… VoIP DATA IPTV You can determine the working mode for the Eth-Trunk according to the following situations: If devices at both ends of the Eth-Trunk support LACP, the LACP mode is recommended.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 2 Link Aggregation Configuration 2.6 Configuring Ethernet Link Aggregation This section describes how to configure Ethernet link aggregation. 2.6.1 Configuring Link Aggregation in Manual Load Balancing Mode Link aggregation implements load balancing, increases bandwidth, and improves transmission reliability.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 2 Link Aggregation Configuration (Optional) Run: mtu mtu The maximum transmission unit (MTU) of the Eth-Trunk is set. The default MTU of an interface is 1500 bytes. NOTICE l The mtu command cannot be used on Layer 2 Eth-Trunks.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 2 Link Aggregation Configuration Before configuring an Eth-Trunk, ensure that both ends use the same working mode. If the local end works in manual load balancing mode, the remote end must use the manual load balancing mode.
NOTE After the trunk-member trap in private-mib enable command is configured, Eth-Trunk member interfaces only use the proprietary MIB to send trap messages. To view these trap messages, use the Huawei proprietary MIB. 2.6.1.4 (Optional) Setting the Lower Threshold for the Number of Active Interfaces...
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 2 Link Aggregation Configuration The system view is displayed. Step 2 Run: interface eth-trunk trunk-id The Eth-Trunk interface view is displayed. Step 3 Run: least active-linknumber link-number The lower threshold for the number of active interfaces is set.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 2 Link Aggregation Configuration By default, an Eth-Trunk works in Layer 2 mode. Create a Layer 3 Eth-Trunk. Run: system-view The system view is displayed. Run: interface eth-trunk trunk-id A Layer 2 Eth-Trunk is created.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 2 Link Aggregation Configuration Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: interface eth-trunk trunk-id The Eth-Trunk interface view is displayed. Step 3 Run: mode lacp-static A working mode of the Eth-Trunk is configured.
Page 64
Eth-Trunk IDs. NOTE After the trunk-member trap in private-mib enable command is configured, Eth-Trunk member interfaces only use the proprietary MIB to send trap messages. To view these trap messages, use the Huawei proprietary MIB. Issue 01 (2014-11-30) Huawei Proprietary and Confidential...
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 2 Link Aggregation Configuration 2.6.2.4 (Optional) Setting the Upper and Lower Thresholds for the Number of Active Interfaces Context The number of Up member links affects the status and bandwidth of an Eth-Trunk. To ensure that the Eth-Trunk functions properly and is less affected by member link status changes, set the following thresholds.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 2 Link Aggregation Configuration 2.6.2.5 (Optional) Configuring a Load Balancing Mode Context Perform the following steps on the device to configure a load balancing mode for an Eth-Trunk. Procedure Configure a Layer 2 Eth-Trunk.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 2 Link Aggregation Configuration Context LACP system priority differentiates priorities of devices at both ends. In LACP mode, active interfaces selected by devices at both ends must be consistent; otherwise, the LAG cannot be set up.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 2 Link Aggregation Configuration Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: interface interface-type interface-number The member interface view is displayed. Step 3 Run: lacp priority priority The LACP priority of the member interface is configured.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 2 Link Aggregation Configuration LACP preemption is enabled. By default, LACP preemption is disabled. NOTE To ensure normal running of an Eth-Trunk, enable or disable LACP preemption at both ends of the Eth- Trunk.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 2 Link Aggregation Configuration NOTE l After you run the lacp timeout command, the local end notifies the remote end of the timeout interval by sending LACPDUs. When fast is specified, the interval for sending LACPDUs is 1 second. When slow is specified, the interval for sending LACPDUs is 30 seconds.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 2 Link Aggregation Configuration Step 5 Run: interface eth-trunk trunk-id.subnumber An Eth-Trunk sub-interface is created. subnumber specifies the number of a sub-interface. The value ranges from 1 to 4096.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 2 Link Aggregation Configuration Procedure Run the display eth-trunk [ trunk-id [ interface interface-type interface-number | verbose ] ] command to check the Eth-Trunk configuration. Run the display lacp statistics eth-trunk [ trunk-id [ interface interface-type interface- number ] ] command to check the statistics about LACPDUs sent and received in LACP mode.
Page 73
Final statistics: The statistics include the number of sent and received packets, percentage of failure response packets, and minimum, maximum, and average response times. <Huawei> ping -a 192.168.1.1 -i gigabitethernet 1/0/1 10.1.1.2 PING 10.1.1.2: 56 data bytes, press CTRL_C to break Reply from 10.1.1.2: bytes=56 Sequence=1 ttl=254 time=2...
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 2 Link Aggregation Configuration round-trip min/avg/max = 1/1/2 ms ----End 2.8 Configuration Examples This section provides several configuration examples of link aggregation. 2.8.1 Example for Configuring Link Aggregation in Manual Load...
Page 75
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 2 Link Aggregation Configuration <Huawei> system-view [Huawei] sysname RouterA [RouterA] interface Eth-Trunk1 [RouterA-Eth-Trunk1] trunkport ethernet 1/0/1 to 1/0/3 [RouterA-Eth-Trunk1] quit Step 2 Create VLANs and add interfaces to the VLANs. The configuration of RouterB is similar to the configuration of RouterA, and is not mentioned here.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 2 Link Aggregation Configuration port trunk allow-pass vlan 10 20 load-balance src-dst-mac interface Ethernet1/0/1 eth-trunk 1 interface Ethernet1/0/2 eth-trunk 1 interface Ethernet1/0/3 eth-trunk 1 interface Ethernet1/0/4 port link-type trunk...
Page 77
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 2 Link Aggregation Configuration When a fault occurs on an active link, the backup link replaces the faulty one to ensure nonstop services. Figure 2-11 Link aggregation in LACP mode...
Page 78
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 2 Link Aggregation Configuration [RouterB] interface ethernet 2/0/1 [RouterB-Ethernet2/0/1] eth-trunk 1 [RouterB-Ethernet2/0/1] quit [RouterB] interface ethernet 2/0/2 [RouterB-Ethernet2/0/2] eth-trunk 1 [RouterB-Ethernet2/0/2] quit [RouterB] interface ethernet 2/0/3 [RouterB-Ethernet2/0/3] eth-trunk 1 [RouterB-Ethernet2/0/3] quit Step 3 Set the LACP system priority on RouterA to 100 so that RouterA becomes the Actor.
Page 79
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 2 Link Aggregation Configuration Weight Ethernet2/0/1 Selected 100M 32768 6145 2609 11111100 Ethernet2/0/2 Selected 100M 32768 6146 2609 11111100 Ethernet2/0/3 Unselect 100M 32768 6147 2609 11100000 Partner: ------------------------------------------------------------------------------ PartnerPortName...
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 2 Link Aggregation Configuration eth-trunk 1 return 2.8.3 Example for Configuring Layer 3 Link Aggregation Networking Requirements RouterA and RouterB are connected by two Layer 3 Ethernet interfaces. To increase link bandwidth and improve reliability, you can create an Eth-Trunk on each router and add the Layer 3 Ethernet interfaces to the Eth-Trunk.
Page 81
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 2 Link Aggregation Configuration [RouterB] interface eth-trunk 1 [RouterB-Eth-Trunk1] undo portswitch [RouterB-Eth-Trunk1] ip address 10.1.1.2 24 [RouterB-Eth-Trunk1] quit # Add Ethernet1/0/0 and Ethernet2/0/0 to Eth-Trunk 1. [RouterB] interface ethernet 1/0/0...
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 2 Link Aggregation Configuration ip address 10.1.1.1 255.255.255.0 interface Ethernet1/0/0 eth-trunk 1 interface Ethernet2/0/0 eth-trunk 1 return Configuration file of RouterB sysname RouterB interface Eth-Trunk1 undo portswitch ip address 10.1.1.2 255.255.255.0...
Page 83
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 2 Link Aggregation Configuration Document Description Rema IEEE 802.3AD IEEE Std 802.3ad - 2005 IEEE Standard for Link Aggregation operation , Link Aggregation Control , Link Aggregation Control Protocol , Marker protocol and Configuration capabilities and restrictions.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration VLAN Configuration About This Chapter VLANs have advantages of broadcast domain isolation, security hardening, flexible networking, and good extensibility. 3.1 Introduction to VLAN This section describes definition, purpose and benefits of VLAN.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration 3.1 Introduction to VLAN This section describes definition, purpose and benefits of VLAN. Definition The Virtual Local Area Network (VLAN) technology divides a physical LAN into multiple broadcast domains, each of which is called a VLAN.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration Figure 3-1shows a typical VLAN application. Three switches are placed in different locations (for example, in different floors of a building); each switch is connected to three hosts that respectively belong to different VLANs (for example, different companies).
Page 87
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration Table 3-1 describes the fields contained in an 802.1Q tag. Table 3-1 Fields contained in an 802.1Q tag Field Leng Name Description TPID Tag Protocol Identifier (TPID), The value 0x8100 indicates an 802.1Q-...
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration Figure 3-4 Link types VLAN3 VLAN3 Access link Trunk link Trunk link DeviceA DeviceB DeviceC Access link VLAN2 VLAN2 untagged frames in VLAN2 frames tagged with VLAN2...
Page 89
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration As shown in Figure 3-4, the access port on a switch connects to the port on a host. The access port can only connect to an access link. Only the VLAN whose ID is the same as the default VLAN ID is allowed on the access port.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration Default VLAN Each port can be configured with a default VLAN identified by the port VLAN ID (PVID). The meaning of the default VLAN varies according to the port type.
Page 91
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration Port Untagged Frame Tagged Frame Frame Type Processing Processing Transmission Trunk l Adds a tag with the l Accepts a tagged frame l If the frame's...
Page 92
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration The trunk link transparently transmits VLAN packets between switches. Backbone line The trunk link transmits packets belonging to multiple VLANs. Figure 3-7 Trunk link communication VLAN 3...
Page 93
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration Sub-interface As shown in Figure 3-8, DeviceA is a Layer 3 switch supporting sub-interface, and DeviceB is a Layer 2 switch. LANs are connected using the switched Ethernet interface on DeviceB and the routed Ethernet interface on DeviceA.
Page 94
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration After receiving the packet, host C returns an ARP reply packet. After receiving the reply packet, DeviceA sends the packet from host A to host C. All packets sent from host A to host C are sent to DeviceA first to implement Layer 3 forwarding.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration Host A obtains Device's MAC address. Host A sends a packet whose destination MAC address is the MAC address of the VLANIF interface and destination IP address is host C's IP address to Device.
Page 96
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration Table 3-3 Example of Assigning Host Addresses on a common VLAN VLAN Sub- Gateway Number of Number of Practical network address available available requirements addresses hosts 10.1.1.0/28...
Page 97
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration Super-VLAN: It is different from the common VLAN. In the super-VLAN, only Layer 3 interfaces are created and physical ports are not contained. The super-VLAN can be viewed as a logical Layer 3 concept.
Page 98
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration Table 3-4 Example for assigning Host addresses in VLAN aggregation mode Subnet Gateway Number of Number of Practical address available available hosts requirements addresses 10.1.1.0/24 10.1.1.1 10.1.1.2-10.1.1.11...
Page 99
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration Figure 3-12 Networking diagram of Layer 3 communications between different sub- VLANs based on Proxy ARP Eth2/0/1 Eth2/0/2 Super VLAN 10 VLANIF10: 10.1.1.1/24 VLAN 2 VLAN 3...
Page 100
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration Figure 3-13 Networking diagram of Layer 2 communications between a sub-VLAN and an external network RouterB Eth2/0/1 VLAN Trunk all VLAN Trunk all Eth2/0/3 RouterA Eth2/0/2...
Page 101
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration Figure 3-14 Networking diagram of Layer 3 communications between a sub-VLAN and an external network VLANIF20 10.1.3.1/24 Eth2/0/2 RouterB VLANIF10 Eth2/0/1 Host C 10.1.2.2/24 10.1.3.2/24 VLANIF10 Eth2/0/3 10.1.2.1/24...
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration After receiving the packet, RouterB performs the Layer 3 forwarding and sends the packet to Host C through the directly-connected interface VLANIF20. The response packet from Host C reaches RouterA after the Layer 3 forwarding on RouterB.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration 3.3.1 VLAN Assignment Port-Based VLAN Assignment Figure 3-15 Networking diagram of port-based VLAN assignment Router L2 Switch CompanyA CompanyC CompanyB VLAN 2 VLAN 3 VLAN 4 Different companies residing in the same business building may need to isolate service data from each other.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration As shown in Figure 3-16, User A is initially connected to RouterA. Now, it is required that User A be connected to RouterB. To ensure that User A can still communicate with User C, configure the assignment of VLANs based on MAC addresses on RouterC.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration Multiple VLANs belongs to different Layer 3 devices Figure 3-18 Networking diagram of communications between multiple VLANs on different Layer 3 devices Trunk Link Router A...
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration Item Description Task Configuring Inter-VLAN After VLANs are configured, 3.6.2 Configuring Inter- Communication users in the same VLAN can VLAN Communication communication with each other while users in different VLANs cannot.
Page 108
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration Context Ports on a Layer 2 switching device can be bound to a specific VLAN. After a port is added to a VLAN, packets of the user that is connected to the port can only be forwarded within the VLAN, but not forwarded to another VLAN.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration Step 5 Add ports to the VLAN. Run either of the following commands as needed: l For access ports: Run the port default vlan vlan-id command to add a port to a specified VLAN.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration Pre-configuration Tasks Before creating a VLANIF interface, complete the following tasks: Create a VLAN. Associate the VLAN with the physical interface. 3.6.2.1 Configuring VLANIF Interfaces for Inter-VLAN Communication...
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration An IP address is assigned to the VLANIF interface for communication at the network layer. If IP addresses assigned to VLANIF interfaces belong to different network segments, a routing protocol must be configured on the device to provide reachable routes.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration dot1q termination vid pe-vid The VLANs allowed by the dot1q sub-interface are specified. Each sub-interface can terminate only one VLAN tag. Sub-interfaces of different main interfaces can be associated with the same VLAN ID. However,...
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration with the VLANIF interface of the super-VLAN. Some subnet IDs, default gateway addresses of the subnets, and directed broadcast addresses of the subnets are saved and different broadcast domains can use the addresses in the same subnet segment.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: vlan vlan-id A VLAN is created, and the VLAN view is displayed. The VLAN ID of a super-VLAN must be different from every sub-VLAN ID.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration An IP address is assigned to the VLANIF interface. ----End 3.6.3.4 (Optional) Configuring an IP Address Pool for a Sub-VLAN Specifying an IP address range for users in a sub-VLAN filters out unauthorized users of which IP addresses are beyond the range.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration proxy ARP must be enabled to allow the super-VLAN to forward or process ARP request and reply packets. Proxy ARP helps PCs in sub-VLANs communicate with each other at the network layer.
Page 117
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration Context To use a network management system to manage multiple devices, create a VLANIF interface on each device and configure a management IP address for the VLANIF interface. You can then log in to a device and manage it using its management IP address.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration Step 6 Run: ip address ip-address { mask | mask-length } [ sub ] The IP address of the VLANIF interface is configured. After assigning an IP address to the VLANIF interface, you can run the stelnet command to log in to a management industrial switch router to manage attached devices.
Page 119
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration Configuration Roadmap The configuration roadmap is as follows: Create VLANs. Add interfaces to the VLAN. Procedure Step 1 Configure the Router. # Create VLAN 2. <Huawei> system-view...
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration Ping any host in Department 4 from a host in Department 3. The ping operation is successful, indicating that Department 3 and Department 4 can communicate with each other.
Page 121
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration Configuration Roadmap The configuration roadmap is as follows: Add Ethernet interfaces to the VLAN. Configure VLANIF interfaces. Procedure Step 1 Configure the Router. # Create VLANs.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration # On PC2 in VLAN 20, configure the default gateway address as the IP address of VLANIF 20 (in this example: 10.10.20.1/24). # After the configuration is complete, PC1 in VLAN 10 can communicate with PC2 in VLAN...
Page 123
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration Figure 3-22 Networking diagram of VLAN damping configuration network Router VLANIF10 10.100.100.100/24 VLAN 10 10.100.100.111/24 10.100.100.110/24 Configuration Roadmap The configuration roadmap is as follows: Create a VLAN.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration 3.8.1 User Terminals in the Same VLAN Cannot Ping Each Other Fault Description User terminals in the same VLAN cannot ping each other. Procedure Step 1 Check that the interfaces connected to the user terminals are in Up state.
Page 132
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration Check Item Method Whether the Run the display vlan vlan-id command in any view to check whether interfaces are the VLAN contains the interfaces. If not, add the interfaces to the added to the VLAN.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 3 VLAN Configuration 3.8.2 VLANIF Interface Goes Down Fault Symptom A VLANIF interface is in Down state. Common causes and solutions Table 3-7 lists the common causes and solutions.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 4 QinQ Configuration QinQ Configuration About This Chapter This chapter describes the concepts and configuration procedure of 802.1Q-in-802.1Q (QinQ), and provides configuration examples. Context NOTE Only the support QinQ.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 4 QinQ Configuration 4.1 Introduction to QinQ This section defines QinQ and describes its purpose and benefits. Definition 802.1Q-in-802.1Q (QinQ) expands VLAN space by adding an additional 802.1Q tag to 802.1Q tagged packets.
Page 137
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 4 QinQ Configuration QinQ Packet Encapsulation Format A QinQ packet has a fixed format, in which an 802.1Q tag is added outside the existing 802.1Q tag of the packet. A QinQ packet has 4 more bytes than an 802.1Q packet.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 4 QinQ Configuration Selective QinQ Selective QinQ is implemented based on interfaces and VLAN IDs. That is, an interface can forward packets based on a single VLAN tag or double VLAN tags. In addition, the device processes packets received on an interface as follows based on their VLAN IDs: l Adds different outer VLAN tags to packets carrying different inner VLAN IDs.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 4 QinQ Configuration Figure 4-2 Networking diagram of basic QinQ Network Enterprise A Enterprise A Branch 1 Branch 2 VLAN 10 to 50 VLAN 10 to 50 Enterprise A has different services, so different VLANs are assigned. Basic QinQ is configured on the CE interface connected to the carrier network.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 4 QinQ Configuration Figure 4-3 Networking diagram of selective QinQ Network Enterprise A Enterprise A Branch 1 Branch 2 VLAN 10 to 50 VLAN 10 to 50 Data: VLAN 10 to 30 Voice: VLAN 31 to 50 Enterprise A has different services, so different VLANs are assigned.
TPID value to the value used by the carrier so that QinQ packets sent from the Huawei device can be transmitted across the carrier network. To prevent errors in packet forwarding and processing, do not set the TPID to any of...
Page 142
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 4 QinQ Configuration Basic QinQ As shown in Figure 4-5, enterprise A has two branches that connect to the carrier network through PE1 and PE2 respectively. Enterprise A has different services, so different VLANs are assigned.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 4 QinQ Configuration Before configuring QinQ on an interface, add the interface to a network bridge. If the interface is deleted from the network bridge, the QinQ configuration is also deleted from the interface.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 4 QinQ Configuration The Ethernet sub-interface is added to the bridge group. Step 6 Run: bridge vlan-transmit enable The interface is enabled to transparently transmit VLAN IDs. Step 7 Run: vlan allow-pass { vid vlan-id1 [ to vlan-id2 ] | default } The VLAN allowed by the Ethernet sub-interface is configured.
Page 146
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 4 QinQ Configuration A bridge group is created and the bridge group view is displayed. Run: quit Exit from the bridge group view. Run: interface { ethernet | gigabitethernet } interface-number.subinterface- number The Ethernet sub-interface view is displayed.
NOTE l To implement interoperability with a non-Huawei device, ensure that the protocol type in the outer VLAN tag added by the industrial switch router can be identified by the non-Huawei device. l The qinq protocol command identifies incoming packets, and adds or changes the TPID value of outgoing packets.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 4 QinQ Configuration Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: interface interface-type interface-number The interface view is displayed. Step 3 Run: qinq protocol protocol-id The protocol type in the outer VLAN tag is set.
Page 149
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 4 QinQ Configuration Figure 4-7 Networking diagram for configuring basic QinQ GE0/0/1 GE0/0/0 GE0/0/0 Network GE0/0/0 GE0/0/1 GE0/0/1 GE0/0/0 GE0/0/0 Enterprise A Enterprise A Branch 1 Branch 2 VLAN 10 to 50...
Page 150
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 4 QinQ Configuration [CE1-GigabitEthernet0/0/0.1] vlan allow-pass vid 10 to 50 Step 3 Configure an interface on CE connected to a PE to add a VLAN tag to user packets.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 4 QinQ Configuration bridge vlan-transmit enable vlan allow-pass vid 10 to 50 vlan dot1q-tunnel 20 return Configuration file of PE1 sysname PE1 vlan batch 20 interface GigabitEthernet0/0/0 port link-type trunk...
Page 152
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 4 QinQ Configuration The requirements are as follows: VLANs are assigned independently in enterprise A, and are independent of carrier VLANs or VLANs of other enterprises. Traffic between two branches of enterprise A is transparently transmitted through the public network, devices transmitting the same service in different branches of enterprise A are allowed to communicate, and devices transmitting different services are isolated.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 5 GVRP Configuration GVRP Configuration About This Chapter This chapter describes basic GVRP concepts, GVRP configuration procedures, and concludes with a GVRP configuration example. Context NOTE AR550 series routers do not support GVRP.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 5 GVRP Configuration 5.1 Introduction to GVRP This section describes the definition, purpose and benefit of GVRP. Definition The Generic Attribute Registration Protocol (GARP) provides a mechanism to propagate attributes so that a protocol entity can register and deregister attributes.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 5 GVRP Configuration switching network. GVRP enables network devices to dynamically deliver, register, and propagate VLAN attributes, reducing workload of the network administrator and ensuring correct configuration. 5.2 Principles This section describes the implementation of GVRP.
Page 159
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 5 GVRP Configuration When a port receives a VLAN attribute reclaim declaration, it deregisters the VLAN specified in the declaration. That is, the port is removed from the VLAN.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 5 GVRP Configuration GARP Timers The GARP protocol defines four timers: Join timer The Join timer controls sending of Join messages including JoinIn messages and JoinEmpty messages. After sending the first Join message, a participant starts the Join timer. If the participant receives a JoinIn message before the Join timer expires, it does not send the second Join message.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 5 GVRP Configuration After receiving a LeaveAll message, a participant restarts all GARP timers. The participant sends another LeaveAll message when its LeaveAll timer expires. This reduces LeaveAll messages sent in a period of time.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 5 GVRP Configuration Field Description Value Protocol ID Indicates the protocol ID. The value is 1. Message Indicates the messages in the packet. Each message consists of the Attribute Type and Attribute list fields.
Page 163
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 5 GVRP Configuration One-Way Registration Figure 5-5 One-way registration of a VLAN attribute RouterA RouterC Static vlan 2 Port 4 Port 1 JoinEmpty JoinEmpty Port 2 Port 3 RouterB Static VLAN 2 is created on RouterA.
Page 164
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 5 GVRP Configuration Two-Way Registration Figure 5-6 Two-way registration of a VLAN attribute RouterA RouterC Static vlan 2 Static vlan 2 Port 4 JoinEmpty JoinIn Port 1 JoinIn JoinEmpty...
Page 165
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 5 GVRP Configuration One-Way Deregistration Figure 5-7 One-way deregistration of a VLAN attribute RouterA RouterC Static vlan 2 Port 4 LeaveEmpty Port 1 LeaveIn Port 3 Port 2 RouterB When VLAN 2 is not required on the routers, the routers can deregister VLAN 2.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 5 GVRP Configuration To delete VLAN 2 from all the routers, two-way deregistration is required. The process is as follows: After static VLAN 2 is manually deleted from RouterC, Port 4 of RouterC starts the Hold timer.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 5 GVRP Configuration Parameter Default Setting GVRP function The GVRP function is disabled globally and on interfaces. Registration mode of the GVRP normal interface LeaveAll timer 1000 centiseconds Hold timer...
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 5 GVRP Configuration The interface is added to the specified VLANs. Step 6 Run: gvrp GVRP is enabled on the interface. By default, GVRP is disabled globally and on each interface.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 5 GVRP Configuration NOTE Before setting the registration mode for an interface, enable GVRP on the interface. ----End 5.5.3 (Optional) Setting the GARP Timers Context When a GARP participant is enabled, the LeaveAll timer is started. When the LeaveAll timer expires, the GARP participant sends LeaveAll messages to request other GARP participants to re-register all its attributes.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 5 GVRP Configuration The value of the LeaveAll timer is set. The default value of the LeaveAll timer is 1000 centiseconds (10 seconds). The Leave timer length on an interface is restricted by the global LeaveAll timer length. When configuring the global LeaveAll timer, ensure that all the interfaces configured with a GARP Leave timer are working properly.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 5 GVRP Configuration Procedure Step 1 Run the reset garp statistics [ interface { interface-type interface-number [ to interface-type interface-number ] }&<1-10> ] command in the user view to clear GARP statistics on the specified interfaces.
Page 172
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 5 GVRP Configuration Configure GVRP on all switche devices of company B and set the registration mode to fixed for the interfaces connecting to company A to allow only the VLAN to which company B belongs to pass.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration STP/RSTP Configuration About This Chapter This chapter describes the concepts and configuration procedures for the Spanning Tree Protocol (STP) and Rapid Spanning Tree Protocol (RSTP), and provides configuration examples.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration 6.1 Introduction to STP/RSTP This section describes definition and purpose of STP/RSTP. Definition Generally, redundant links are used on an Ethernet switching network to provide link backup and enhance network reliability.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration Purpose After a spanning tree protocol is configured on an Ethernet switching network, the protocol calculates the network topology to implement the following functions: Loop prevention: The spanning tree protocol blocks redundant links to prevent potential loops on the network.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration 2 and forward the request through port 1. As this process repeats, resources on the entire network are exhausted, and the network finally breaks down. Assume that no broadcast storm has occurred on the network shown in Figure 6-1.
Page 179
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration On an STP network, a port's accumulative path cost to the root bridge is the sum of the path costs of all ports between the port and the root bridge. The accumulative path cost is the root path cost.
Page 180
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration Table 6-2 Description of the designated bridge and designated port Object Designated Bridge Designated Port Device A directly connected device The designated bridge's port that that forwards configuration...
Page 181
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration Table 6-3 Four important fields Field Description Root ID Each STP network has only one root bridge. Root path cost The distance between the port sending the configuration BPDU and the root bridge determines the path cost to the root bridge.
Page 182
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration Figure 6-4 Scenario where PIDs need to be compared designated port blocked port Five Port States Table 6-4 describes the possible states of ports on an STP device.
Page 183
5. The forwarding delay timer has expired. NOTICE By default, a Huawei network device uses the MSTP mode. After a device transitions from the MSTP mode to the STP mode, its STP ports support only those states defined in MSTP, including Forwarding, Learning, and Discarding.
Page 184
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration Port Description State Discardin A port in the Discarding state can only receive BPDUs. The following parameters affect the STP port states and convergence. Hello Time The Hello Time specifies the interval at which an STP device sends configuration BPDUs and Hello packets to detect link failures.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration Table 6-6 Values of STP parameters (in centiseconds) Parameter Default Value Value Range Hello Time 100-1000 Max Age 2000 600-4000 Forward Delay 1500 400-3000 6.2.3 BPDU Format The BID, root path cost, and PID are all carried in BPDUs.
Page 186
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration Table 6-7 Fields in a BPDU Field Byte Description Protocol Identifier The value is fixed at 0. Protocol Version The value is fixed at 0. Identifier BPDU Type Indicates the type of a BPDU.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration Figure 6-6 Format of the Flags field Reserved Bit7 Bit0 TCA(Topology Change TC(Topology Acknowledgment flag) Change flag) TCN BPDU A TCN BPDU contains only three fields: Protocol Identifier, Version, and Type, as shown in Table 6-7.
Page 188
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration The root ID is the BID of the local bridge, the root path cost is 0 (accumulative path cost from the port to the local bridge), the sender BID is the BID of the local bridge, and the PID is the ID of the port that sends the BPDU.
Page 189
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration Table 6-9 Selecting the optimal configuration BPDU Process Each port compares the received configuration BPDU with its own configuration BPDU: l If the received configuration BPDU is inferior, the port discards the received configuration BPDU and does retain its own configuration BPDU.
Page 190
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration Table 6-10 Initial state of each device Device Port Configuration BPDU DeviceA Port A1 {0, 0, 0, Port A1} Port A2 {0, 0, 0, Port A2}...
Page 191
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration Comparison Configuration BPDU After Comparison Devi l Port B1 receives the configuration BPDU {0, l Port B1: {0, 0, 0, Port 0, 0, Port A1} from Port A1 and finds it superior...
Page 192
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration Comparison Configuration BPDU After Comparison l DeviceC compares the configuration BPDU on l Root port (Port C1): {0, each port and finds that the configuration 0, 0, Port A2} BPDU on Port C1 is optimal.
Page 193
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration After the topology becomes stable, the root bridge still sends configuration BPDUs at intervals specified by the Hello timer. Each non-root bridge forwards the received configuration BPDUs through its designated port.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration NOTE l TCN BPDUs are used to inform the upstream device and root bridge of topology changes. l Configuration BPDUs with the TCA bit set to 1 are used by the upstream device to inform the downstream device that the topology changes are known and instruct the downstream device to stop sending TCN BPDUs.
Page 195
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration Figure 6-10 Diagram of port roles root bridge root bridge root port designated port Alternate port Backup port As shown in Figure 6-10, RSTP defines four port roles: root port, designated port, alternate port, and backup port.
Page 196
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration After roles of all RSTP ports are determined, the topology convergence is completed. RSTP redefines port states. RSTP deletes two port states defined in STP and reduces the number of port states to 3.
Page 197
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration Configuration BPDUs are processed in a different way. – Configuration BPDU transmission In STP, the root bridge sends configuration BPDUs at Hello intervals after the topology becomes stable.
Page 198
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration Protection functions Table 6-13 describes protection functions provided by RSTP. Table 6-13 Protection functions Protectio Scenario Principle Function BPDU On a switching device, ports BPDU protection enables a switching...
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration Protectio Scenario Principle Function Loop On an RSTP network, a Loop protection can be enabled on the root protection switching device maintains and alternate port of a switching device. If...
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration Figure 6-12 Proposal/Agreement negotiation process 1 Proposal 3 Agreement 2 sync 2 sync 2 sync (leaves the port (Leaves the port (Blocks the state unchanged) state unchanged)
STP mode and starts to send configuration BPDUs after two Hello intervals. In this manner, RSTP and STP are interoperable. After STP-capable devices are removed, Huawei RSTP-capable devices can switch back to the RSTP mode.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration Figure 6-13 Typical STP application Network Root Bridge Blocked port As shown in Figure 6-13, STP is deployed on the devices. The devices exchange information to discover loops on the network and block a port to trim the ring topology into a loop-free tree topology.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration Parameter Default Setting Max Age 2000 centiseconds 6.6 Configuring STP/RSTP This section describes how to configure STP/RSTP. 6.6.1 Configuring Basic STP/RSTP Functions You can configure STP/RSTP on an Ethernet network to trim the network into a loop-free tree topology.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration new root bridge is specified, the secondary root bridge will not become the root bridge. If there are multiple secondary root bridges, the one with smallest MAC address becomes the root bridge of the spanning tree.
The path cost value range is determined by the calculation method. After the calculation method is determined, it is recommended that you set smaller path cost values for the ports with higher link rates. In the Huawei calculation method, the link rate determines the recommended value for the path cost. Table 6-15 lists the recommended path costs for ports with different link rates.
A path cost is set for the interface. l When the Huawei calculation method is used, cost ranges from 1 to 200000. l When the IEEE 802.1d standard method is used, cost ranges from 1 to 65535.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration The default priority value of a port on a switching device is 128. ----End 6.6.1.6 Enabling STP/RSTP Context NOTICE After STP/RSTP is enabled on a ring network, spanning tree calculation starts immediately on the network.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration NOTE The normal mode is recommended. If the fast mode is used, ARP entries will be frequently deleted, causing a high CPU usage (even 100%). As a result, network flapping will frequently occur.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration NOTE l RSTP uses a single spanning tree instance on the entire network. As a result, performance deterioration cannot be prevented when the network scale grows. Therefore, the network diameter cannot be larger than 7.
Page 211
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration timer to prevent loops. When the topology changes, all ports will be temporarily blocked during the Forward Delay. Hello Time: specifies the interval at which hello packets are sent. A switching device sends configuration BPDUs at the specified interval to detect link failures.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration By default, the Max Age timer is 2000 centiseconds. ----End 6.6.2.4 Setting the Maximum Number of Connections in an Eth-Trunk that Affects Spanning Tree Calculation Context The path costs affect spanning tree calculation.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration system-view The system view is displayed. Step 2 Run: interface eth-trunk trunk-id The Eth-Trunk interface view is displayed. Step 3 Run: max bandwidth-affected-linknumber link-number The maximum number of connections affecting the Eth-Trunk bandwidth is set.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration system-view The system view is displayed. Step 2 Run: stp bridge-diameter diameter The network diameter is configured. By default, the network diameter is 7. NOTE l RSTP uses a single spanning tree instance on the entire network. As a result, performance deterioration cannot be prevented when the network scale grows.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration 6.6.3.3 Setting RSTP Timers Context The following timers are used in spanning tree calculation: Forward Delay: specifies the delay before a state transition. After the topology of a ring network changes, it takes some time to spread the new configuration BPDU throughout the entire network.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration The Hello Time is set for the switching device. By default, the Hello Time is 200 centiseconds. Run: stp timer max-age max-age The Max Age timer is set for the switching device.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration NOTE The maximum number of connections affects only the path cost of an Eth-Trunk interface participating in spanning tree calculation, and does not affect the actual bandwidth of the Eth-Trunk link. The actual bandwidth for an Eth-Trunk link depends on the number of active member interfaces in the Eth-Trunk.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration l If the Ethernet interface works in full-duplex mode, the interface is connected to a P2P link. In this case, force-true can be specified in the command to implement rapid network convergence.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration The STP-enabled device is shut down or disconnected. The STP-enabled device is switched to the RSTP mode. Procedure Switching to the RSTP mode in the interface view...
Page 220
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration NOTICE After all ports are configured as edge ports and BPDU filter ports in the system view, none of ports on the local device send BPDUs or negotiate the STP states with directly connected ports on the peer device.
Run the display stp [ interface interface-type interface-number ] [ brief ] command to view the spanning tree status and statistics. ----End 6.6.4 Configuring RSTP Protection Functions Huawei network devices provide the following RSTP protection functions. You can configure one or more functions. 6.6.4.1 Configuring BPDU Protection on a Switching Device Procedure...
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration The auto recovery function takes effect only for the interfaces that transition to the error- down state after the error-down auto-recovery command is executed. 6.6.4.2 Configuring TC Protection on a Switching Device...
----End 6.6.5 Setting Parameters for Interoperation Between Huawei and Non-Huawei Devices To implement interoperation between Huawei and non-Huawei devices, select the fast transition mode based on the Proposal/Agreement mechanism of the non-Huawei device. Issue 01 (2014-11-30) Huawei Proprietary and Confidential...
Page 224
Forwarding state. On an STP network, if a Huawei switching device is connected to a non-Huawei device that uses a different Proposal/Agreement mechanism, the two devices may fail to interoperate with each other.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration By default, the enhanced fast transition mode is used on a port. ----End 6.7 Maintaining STP/RSTP This section describes how to view and reset STP/RSTP statistics.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration 6.8.1 Example for Configuring Basic STP Functions Networking Requirements On a complex network, multiple physical links are often deployed between two devices for link redundancy (one as the active link and the others as standby links). Redundant links may cause loops on the network, and loops will result in broadcast storms and damage MAC address entries.
Page 227
# On RouterA, set the path cost calculation method to the Huawei proprietary method. The configurations of SwitchA, SwitchB, SwitchC and SwitchD are similar to that of RouterA.
Page 228
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration [SwitchC] interface ethernet 0/0/2 [SwitchC-Ethernet0/0/2] stp disable [SwitchC-Ethernet0/0/2] quit [SwitchC] interface ethernet 0/0/3 [SwitchC-Ethernet0/0/3] stp disable [SwitchC-Ethernet0/0/3] quit l Enable STP globally. # Enable STP globally on RouterA. The configurations of SwitchA, SwitchB, SwitchC and SwitchD are similar to that of RouterA.
Page 229
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration # Run the display stp brief command on SwitchD to view port roles and states. Eth0/0/1 is selected as root port and is in the Forwarding state. Eth0/0/4 is selected as designated port and is in the Discarding state.
Page 232
# On RouterA, set the path cost calculation method to the Huawei proprietary method. [RouterA] stp pathcost-standard legacy # On SwitchA, SwitchB, SwitchC and SwitchD, set the path cost calculation method to the Huawei proprietary method according to the configuration guide of the switches.
Page 233
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration # Enable RSTP on all the ports except those connected to PCs on SwitchA, SwitchB, SwitchC and SwitchD. Step 2 Configure RSTP protection. # Enable root protection on Eth2/0/0 and Eth2/0/1 of RouterA.
Page 235
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 6 STP/RSTP Configuration Document Description Rema IEEE 802.1D IEEE Standard for: Local and metropolitan area networks Virtual Bridged Local Area Networks IEEE 802.1S IEEE Standard for: Local and metropolitan area networks Virtual Bridged Local Area Networks IEEE 802.1W...
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration MSTP Configuration About This Chapter This chapter describes the concepts and configuration procedure of MSTP, and provides configuration examples. 7.1 Introduction to MSTP This section describes definition and purpose of MSTP.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration 7.1 Introduction to MSTP This section describes definition and purpose of MSTP. Definition Generally, redundant links are used on an Ethernet switching network to provide link backup and enhance network reliability.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration Purpose After a spanning tree protocol is configured on an Ethernet switching network, it calculates the network topology and implements the following functions to remove network loops: Loop cut-off: The potential loops on the network are cut off by blocking redundant links.
Page 239
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration To fix the defect of STP and RSTP, the IEEE released 802.1s in 2002, defining the Multiple Spanning Tree Protocol (MSTP). MSTP implements fast convergence and provides multiple paths to load balance VLAN traffic.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration 7.2.2 Basic MSTP Concepts MSTP Network Hierarchy As shown in Figure 7-3, the MSTP network consists of one or more MST regions. Each MST region contains one or more MSTIs. An MSTI is a tree network consisting of switching devices running STP, RSTP, or MSTP.
Page 241
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration Figure 7-4 MST region MSTI1 Master Bridge root switch:S3 MSTI2 root switch:S2 MSTI0 (IST) root switch:S1 VLAN1 MSTI1 VLAN2,VLAN3 MSTI2 other VLANs MSTI0 VLAN Mapping Table The VLAN mapping table is an attribute of the MST region.
Page 243
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration CIST Root Figure 7-6 MSTP network CIST Root Region Root Region Root Region Root On the network shown in Figure 7-6, the CIST root is the root bridge of the CIST. The CIST root is a device in A0.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration CIST A CIST, calculated by using STP or RSTP, connects all the switching devices on a switching network. As shown in Figure 7-6, the ISTs and the CST form a complete spanning tree, the CIST.
Page 245
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration Port Description Role Backup l From the perspective of sending BPDUs, a backup port is blocked after a port BPDU sent by itself is received. l From the perspective of user traffic, a backup port provides a backup/ redundant path to a segment where a designated port already connects.
Page 246
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration Figure 7-7 Root port, designated port, alternate port, and backup port Root root port designated port Alternate port Backup port Figure 7-8 Master port and regional edge port...
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration Table 7-3 Port status Port Description Status Forwardi A port in the Forwarding state can send and receive BPDUs as well as forward user traffic. Learning A port in the Learning state learns MAC addresses from user traffic to construct a MAC address table.
Page 248
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration Table 7-5 Differences between BPDUs Version Type Name 0x00 Configuration BPDU 0x80 TCN BPDU 0x02 RST BPDU 0x02 MST BPDU MST BPDU Format Figure 7-9 shows the MST BPDU format.
Page 249
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration Table 7-6 lists the major information carried in an MST BPDU. Table 7-6 Major information carried in an MST BPDU Field Byte Description Protocol Indicates the protocol identifier.
Page 250
BPDU format. Once the configuration is incorrect, a loop probably occurs due to incorrect MSTP calculation. By using the stp compliance command, you can configure a port on a Huawei datacom device to automatically adjust the MST BPDU format. With this function, the port automatically adopts the peer BPDU format.
After a switching device becomes the root, it sends BPDUs at Hello intervals. Non-root switching devices adopt the Hello Time value set for the root. Huawei datacom devices allow the maximum number of BPDUs sent by a port at a Hello interval to be configured as needed.
Page 252
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration Vector Name Description Regional root ID Identifies the MSTI regional root. The regional root ID consists of the priority value (16 bits) and MAC address (48 bits).
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration MSTI Calculation In an MST region, MSTP calculates an MSTI for each VLAN based on mappings between VLANs and MSTIs. Each MSTI is calculated independently. The calculation process is similar to the process for STP to calculate a spanning tree.
By default, Huawei datacom devices use the fast transition mechanism in enhanced mode. To enable a Huawei datacom device to communicate with a third-party device that use the fast transition mechanism in common mode, configure the Proposal/Agreement mechanism on the Huawei datacom device so that the Huawei datacom device works in common mode.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration Table 7-8 Configuration task summary of MSTP Item Description Task Configuring Basic MSTP MSTP is commonly 7.6.1 Configuring Basic Functions configured on switching MSTP Functions devices to trim a ring network to a loop-free network.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration Parameter Default Setting MSTP status MSTP is enabled globally and on an interface. Switching device priority 32768 Port priority Algorithm used to calculate the dot1t, IEEE 802.1t...
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration 7.6.1.1 Configuring the MSTP Mode Context Before configuring basic MSTP functions, set the working mode of a switching device to MSTP. MSTP is compatible with STP and RSTP.
Page 259
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration Step 2 Run: stp region-configuration The MST region view is displayed. Step 3 Run: region-name name The name of an MST region is configured. By default, the MST region name is the MAC address of the management network interface on the MPU of the switching device.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration MST region configurations are activated so that the configured region name, VLAN-to-instance mappings, and revision number can take effect. If this step is not done, the preceding configurations cannot take effect.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration The system view is displayed. Run: stp [ instance instance-id ] root secondary The device is configured as the secondary root bridge. By default, a switching device does not function as the secondary root bridge. After the configuration is complete, the BID of the device is 4096 and cannot be changed.
In the Huawei calculation method for example, the link rate determines the recommended value for the path cost. The following table lists the recommended path costs for ports with different link rates.
A path cost is set for the port in the current MSTI. l When the Huawei calculation method is used, cost ranges from 1 to 200000. l When the IEEE 802.1d standard method is used, cost ranges from 1 to 65535.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration network flapping. Therefore, to ensure rapid and stable spanning tree calculation, perform basic configurations on the switching device and its ports and enable MSTP. Procedure Step 1 Run: system-view The system view is displayed.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration 7.6.2.2 Setting the MSTP Timeout Interval Context If a device does not receive any BPDUs from the upstream device within the timeout interval, the device considers the upstream device to have failed and recalculates the spanning tree.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration You are not advised to directly change the preceding three timers. The three parameters are relevant to the network scale; therefore, it is recommended that you set the network diameter so that the spanning tree protocol automatically adjusts these timers.
Page 268
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration As shown in Figure 7-12, deviceA and deviceB are connected through two Eth-Trunk links. Eth-Trunk 1 has three member interfaces in Up state and Eth-Trunk 2 has two member interfaces in Up state.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration By default, the maximum number of connections affecting the bandwidth of an Eth-Trunk is ----End 7.6.2.5 Setting the Link Type of a Port Context It is easy to implement rapid convergence on a P2P link. If the two ports connected to a P2P link are root or designated ports, the ports can transit to the forwarding state quickly by sending Proposal and Agreement packets.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration Step 2 Run: interface interface-type interface-number The view of the Ethernet interface participating in STP calculation is displayed. Step 3 Run: stp transmit-limit packet-number The maximum number of BPDUs sent by a port in a specified period is set.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration The device is switched to the MSTP mode. ----End 7.6.2.8 Configuring a Port as an Edge Port and BPDU Filter Port Context If a designated port is located at the edge of a network and is directly connected to terminal devices, this port is called edge port.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration Run: system-view The system view is displayed. Run: interface interface-type interface-number The view of the Ethernet interface that participates in spanning tree calculation is displayed. (Optional) Run: stp edged-port enable The port is configured as an edge port.
[ brief ] command to view spanning-tree status and statistics. ----End 7.6.3 Configuring MSTP Protection Functions Huawei datacom devices provide the following MSTP protection functions. You can configure one or more functions. Pre-configuration Tasks Before configuring MSTP protection functions, complete the following task: Configuring MSTP 7.6.3.1 Configuring BPDU Protection on a Switching Device...
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration Follow-up Procedure If you want an edge port to automatically recover from the error-down state, run the error-down auto-recovery cause bpdu-protection interval interval-value command in the system view to configure the auto recovery function and set a recovery delay on the port.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration 7.6.3.3 Configuring Root Protection on an Interface Context Due to incorrect configurations or malicious attacks on the network, a root bridge may receive BPDUs with a higher priority. Consequently, the legitimate root bridge is no longer able to serve as the root bridge and the network topology is changed, triggering spanning tree recalculation.
[ brief ] command to view spanning-tree status and statistics. ----End 7.6.4 Configuring MSTP Interoperability Between Huawei Devices and Non-Huawei Devices To communicate with a non-Huawei device, set proper parameters on the MSTP-enabled Huawei device. 7.6.4.1 Configuring a Proposal/Agreement Mechanism Context The rapid transition mechanism is also called the Proposal/Agreement mechanism.
After receiving the message, the upstream device sets the port connected to the downstream device as a designated port. The designated port then transitions to the Forwarding state. When Huawei devices are connected to non-Huawei devices, select the same mode as that used on non-Huawei devices. Procedure...
VLAN-to-instance mappings but different BPDU keys. To address this problem, enable the digest snooping function on the Huawei device. Perform the following steps on a switching device in an MST region to enable the digest snooping function.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration The digest snooping function is enabled. ----End 7.6.4.4 Checking the Configuration Procedure Run the display stp [ instance instance-id ] [ interface interface-type interface-number ] [ brief ] command to view spanning-tree status and statistics.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration 7.8.1 Example for Configuring Basic MSTP Functions Networking Requirements On a complex network, loops are inevitable. With the requirement for network redundancy backup, network designers tend to deploy multiple physical links between two devices, one of which is the master and the others are the backup.
Page 282
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration Configuration Roadmap The configuration roadmap is as follows: Configure basic MSTP functions, including: Configure the MSTP mode for the ring network. Configure an MST region and create multiple MSTIs to implement load balancing.
Page 283
200000. l If the switches are not Huawei 2300 Series, all switches on a network must use the same path cost calculation method. Refer to STP List of path costs to get standard of other calculation methods.
Page 284
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration [RouterA-Ethernet2/0/1] quit Step 3 Configure the Layer 2 forwarding function on devices in the ring. l Create VLANs on RouterA, SwitchA, SwitchB, SwitchC and SwitchD. # Create VLANs 2 to 20 on RouterA.
Page 285
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration # Verify the interface status and protection type on SwitchC. In MSTI1, interface Eth0/0/1 is elected as root port, interface Eth0/0/4 is blocked. In MSTI2, interface Eth0/0/1 is elected as root port, interface Eth0/0/4 is elected as designated port.
Page 286
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 7 MSTP Configuration port link-type trunk port trunk allow-pass vlan 2 to 20 return Configuration file of SwitchB sysname SwitchB vlan batch 2 to 20 stp instance 2 root secondary...
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration SEP Configuration About This Chapter Smart Ethernet Protection (SEP) is a ring network protocol specially used for the Ethernet link layer. It blocks redundant links to prevent logical loops on a ring network.
STP/RSTP/MSTP STP, RSTP, and MSTP are standard protocols for breaking loops on Ethernet networks. They are mature and widely used. Huawei devices running STP, RSTP, or MSTP can communicate with non-Huawei devices. Networks running these protocols converge slowly (in seconds), failing to meet transmission requirements of some real-time services.
Page 290
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration running SEP immediately unblocks the interface and performs link switching to restore communication between nodes. Figure 8-1 shows a typical SEP application. CE1 is connected to Network Provider Edges (NPEs) through a semi-ring formed by Routers.
Page 291
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration Figure 8-1 Schematic diagram for SEP Access Aggregation Core Router1 Router3 Master Backup IP/MPLS NPE1 VRRP+peer BFD Core NPE2 Router5 Router4 Router2 Backup Master a,SEP is not deployed on the semi-ring...
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration SEP multi-instance is used to improve bandwidth efficiency and implement traffic load balancing. SEP multi-instance allows two SEP segments to be configured on a physical ring.
Page 293
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration A SEP segment is a ring or linear Ethernet topology. Each SEP segment has a control VLAN, edge interfaces, and common interfaces. Control VLAN In a SEP segment, the control VLAN is used to transmit only SEP packets.
Page 294
No-neighbor primary edge interfaces are used to interconnect Huawei devices and non-Huawei devices or interconnect Huawei devices and devices that do not support SEP. No-neighbor A SEP segment has only one no-neighbor secondary edge...
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration In a SEP segment, a SEP interface has two working states: Forwarding and Discarding, as shown in Table 8-2. Table 8-2 Interface status Interface Description Status Forwarding The interface can forward user traffic, receive and send SEP packets.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration Packet Type Packet Subtype Description Primary edge After an interface has SEP enabled, it considers itself interface the primary edge interface if it is qualified for primary election packet edge interface selection.
Page 297
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration the other devices. After receiving LSA request packets from the device, neighboring interfaces reply with LSA ACK packets that contain the latest link state information. SEP segment topology display The topology display function allows you to view the topology with the highest network connectivity on any device in a SEP segment.
Page 298
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration NOTE The constraints listed in Table 8-4 ensure that each node in a ring or linear topology displays the same topology information. Primary Edge Interface Election Only interfaces that are configured as no-neighbor edge interfaces, primary edge interfaces, and secondary edge interfaces can participate in primary edge interface election.
Page 299
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration As shown in Figure 8-3, if a link fault occurs in the SEP segment, P1 on Router1 and P1 on Router5 receive fault notification packets or P1 on LSW5 does not receive primary edge interface election packets within a specified period.
Page 300
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration Interface Blocking Mode Description Specify a blocked interface After SEP is configured, the interface to be blocked is based on the device and determined by the device and interface names. Before interface names.
Page 301
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration Preemption Mode Description Preemption Mode Preemption is classified into delayed preemption and manual preemption. NOTE Preemption can only be l Delayed preemption implemented on the device...
Page 302
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration Table 8-7 SEP topology change notification SEP Topology Change Description Notification An interface fault occurs. Figure 8-4 shows an interface fault in a SEP segment. An interface fault can be a link fault or neighboring interface fault.
Page 306
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration Figure 8-6 Networking diagram for SEP Router2 Router4 Segment1 Router3 Router1 VLAN 201~400 VLAN 100~200 Primary Edge Port Secondary Edge Port Block Port SEP multi-instance allows two SEP segments to be configured on a physical ring. Each SEP segment independently detects the completeness of the physical ring, blocks or unblocks interfaces without affecting the other.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration Item Description Task Specifying an Interface to In some cases, however, the 8.5.2 Specifying an Block negotiated blocked interface Interface to Block may not be the required one.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration 8.5.1.1 Configuring a SEP Segment Context A SEP segment is the basic unit for SEP. A SEP segment consists of interconnected Layer 2 switching devices configured with the same SEP segment ID and control VLAN ID.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration A control VLAN is configured for the SEP segment to transmit SEP packets. The control VLAN must be not created, and is not used by VLAN mapping and VLAN stacking.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration 8.5.1.4 Adding a Layer 2 Interface to a SEP Segment and Configuring a Role for the Interface Context To ensure that SEP packets are forwarded correctly in a SEP segment, add Layer 2 interfaces to the SEP segment and configure different roles for the interfaces.
Page 318
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration Interface Sub-role Description Deployment Scenario Role Edge interface Primary A SEP segment has only one Open-ring networking edge primary edge interface, Closed-ring networking interface which is determined by the Multi-ring networking configuration and election.
Page 319
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration Interface Sub-role Description Deployment Scenario Role The no-neighbor secondary neighbor edge interface terminates secondary packets and sends topology edge change notification messages interface to other networks.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration 8.5.1.5 Checking the Configuration Procedure Run the display sep segment { segment-id | all } command to check the configurations of SEP segments. Run the display sep interface [ interface-type interface-number | segment segment-id ] [ verbose ] command to check information about interfaces that are added to a specified SEP segment.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration Interface Blocking Description Mode Specify a blocked This mode applies to a small-scale network. interface based on the After fault recovery, a specified interface is blocked based on the device and interface device and interface names.
Page 322
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration Table 8-12 Preemption mode Preemption Advantage Disadvantage Mode Non-preemption SEP is in non- The blocked interface is one of the two mode preemption mode by interfaces that complete neighbor default.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration The system view is displayed. Step 2 Run: sep segment segment-id A SEP segment is created and the view of the SEP segment is displayed. Step 3 Run: preempt { manual | delay seconds } The preemption mode is configured on the primary edge interface.
Page 324
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration Figure 8-14 Networking diagram for SEP multi-instance IP/MPLS Core group 2:Master group 1:Master group 1:Backup group 2:Backup NPE2 NPE1 VRRP+peer BFD Router2 Router4 Segment2 SEP Segment1...
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: stp region-configuration The MST region view is displayed. Step 3 Run: instance instance-id vlan { vlan-id [ to vlan-id ] } &<1-10>...
Page 326
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration NOTE Currently, topology changes in a SEP segment can be reported to other SEP segments, STP networks. After receiving a topology change notification from a lower-layer network, a device on the upper-...
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration 8.5.4.2 Checking the Configuration Procedure Run the display sep interface verbose command to check information about the interfaces added to a SEP segment. ----End 8.6 Maintaining SEP This section describes how to maintain SEP, including clearing SEP statistics.
Page 328
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration In the closed ring networking, CE1 is dual-homed to a Layer 2 network through multiple Layer 2 switching devices. The two edge devices connected to the upper-layer Layer 2 network are directly connected to each other.
Page 329
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration Set the highest priority for GE7/0/2 of Router3 and retain the default priority of the other interfaces so that GE7/0/2 of Router3 will be blocked. Configure delayed preemption on the device where the primary edge interface is located.
Page 330
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration NOTE By default, STP is enabled on a Layer 2 interface. Before adding an interface to a SEP segment, disable STP on the interface. # On Router1, configure GE7/0/1 as the primary edge interface and GE7/0/3 as the secondary edge interface.
Page 331
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration Configure the preemption mode. # Configure delayed preemption on Router1. [Router1-sep-segment1] preempt delay 30 [Router1-sep-segment1] quit NOTE l You must set the preemption delay when delayed preemption is used because there is no default delay time.
Page 334
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration SEP runs at the access layer and aggregation layer. When there is no faulty link on a ring network, SEP can eliminate loops on the network. When a link fails on the ring network, SEP can rapidly restore communication between nodes on the network.
Page 335
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration l Configure SEP segment 3 on Router3, Router4, and Router9 to Router11, and configure VLAN 30 as the control VLAN of SEP segment 3. Add devices on the rings to the SEP segments and configure interface roles on the edge devices of the SEP segments.
Page 338
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration [Router1] sep segment 1 [Router1-sep-segment1] block port optimal [Router1-sep-segment1] quit # On Router3, set the priority of GE7/0/4 to 128, which is the highest priority among the interfaces so that GE7/0/4 will be blocked.
Page 345
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration When there is no faulty link on the ring network, SEP can eliminate loops. When a link fails on the ring network, SEP can rapidly restore communication between nodes.
Page 346
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration Configure SEP segment 1 on Router1 to Router3 and configure VLAN 10 as the control VLAN of SEP segment 1. Add Router1 to Router3 to SEP segment 1 and configure interface roles on the edge devices (Router1 and Router2) of the SEP segment.
Page 347
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration NOTE l The control VLAN must be a VLAN that has not been created or used, but the configuration file automatically displays the command for creating the VLAN.
Page 349
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration # On Router1 and Router2, create VLAN 100 and add GE7/0/1 to VLAN 100. The configurations of Router1 and Router2 are similar to the configuration of PE1. For details about the configuration, see the configuration files.
Page 350
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration region-name RG1 active region-configuration sep segment 1 control-vlan 10 block port middle tc-notify stp protected-instance 0 to 4094 interface GigabitEthernet7/0/1 port hybrid tagged vlan 10 100...
Page 351
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration port hybrid tagged vlan vlan 100 return Configuration file of PE1 sysname PE1 vlan batch 100 stp region-configuration region-name RG1 active region-configuration interface GigabitEthernet7/0/1 port hybrid tagged vlan 100...
The path where the secondary edge interface is located remains idle, wasting bandwidth. To improve bandwidth efficiency and implement traffic load balancing, Huawei develops SEP multi-instance.
Page 354
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration Different SEP segments can use the same control VLAN. Configure SEP protected instances, and set mappings between SEP protected instances and user VLANs to ensure that topology changes affect only corresponding VLANs.
Page 355
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration # Configure Router4. [Router4] sep segment 2 [Router4-sep-segment2] control-vlan 10 [Router4-sep-segment2] quit NOTE l The control VLAN must be a new one. l The command used to create a common VLAN is automatically displayed in a configuration file.
Page 357
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 8 SEP Configuration SEP segment 1 ---------------------------------------------------------------- Interface Port Role Neighbor Status Port Status ---------------------------------------------------------------- GE7/0/1 common forwarding SEP segment 2 ---------------------------------------------------------------- Interface Port Role Neighbor Status Port Status...
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration Transparent Bridging Configuration About This Chapter Transparent bridges are widely used in Ethernet LANs because they are easy to configure and operate. Context NOTE AR550 series routers do not support transparent bridges.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration 9.1 Introduction to Transparent Bridge Definition Transparent bridges are applied in Ethernet environments to connect LANs, to facilitate seamless interaction between LANs. A transparent bridge learns the network topology needed to forward packets by reading the received packet's source MAC address and creating a mapping table between the source MAC address and the interface.
Page 362
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration Figure 9-1 PC1 transmitting information to PC2 on LAN1 LAN1 LAN1 PC 2 PC 1 RouterA Port1 Port2 Port3 Port4 PC 4 PC 3 LAN2...
Page 363
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration When PC2 responds to the frame from PC1, the network bridge also detects the frame from PC2 and learns that PC2 connects to Port2 because the frame is received from Port2. The mapping...
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration Figure 9-5 Local bridging network diagram PC 3 PC 4 LAN1 Eth2/0/1 RouterA Eth2/0/2 LAN2 PC 1 PC 2 A bridge group is created on Router A. Ethernet 2/0/1 in LAN 1 and Ethernet 2/0/2 in LAN 2 are added to the bridge group.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration Integrated bridging and routing uses Bridge-if interfaces for routing packets. Bridge-if interfaces can be configured with network layer attributes, such as IP addresses. Each bridge group can be configured with only one Bridge-if interface.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration Figure 9-8 Networking diagram for VLAN ID transparent transmission RouterB RouterA Eth2/0/0 Eth2/0/0 VLAN2 VLAN2 Eth1/0/0 Eth1/0/0 SwitchA SwitchB If two trunk interfaces are connected over Ethernet, configuring VLAN ID transparent transmission prevents the transmission devices on the Ethernet from removing VLAN IDs of the packets.
Page 369
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration Table 9-1 Transparent bridging usage scenarios Scenar Users in the Users in the Users in Users in Same Same Different Different Geographical Geographical Geographical Geographical...
Page 370
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration departments in the same bridge group can communicate with each other and those in different bridge groups are isolated from each other. Figure 9-9 Interworking on the same network segment...
Page 371
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration Remote Users on the Same Network Segment An enterprise has multiple departments in different locations. As businesses develop, data communication is required between the terminals within the same department, and between some departments.
Page 372
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration Figure 9-12 Remote users in the same vlan on the same network segment RouterA RouterB IP Core Network Eth1/0/3 Eth1/0/3 Eth1/0/2 Eth1/0/1 Eth1/0/1 Eth1/0/2 Switch 1...
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration 9.4 Configuration Task Summary Transparent bridges are widely used in Ethernet LANs because they are easy to configure and operate. Table 9-2 lists the configuration task summary of Transparent Bridging.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration 9.6.1 Configuring Local Bridging Configuring local bridging allows users in the same geographical location and on the same network segment to communicate with each other.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration Figure 9-14 Networking diagram for adding users to bridge groups RouterA User 3 User 4 Sub interface VLANIF 11 User 1 User 2 VLAN 11 Perform the following steps on the user-side interface of the device.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration system-view The system view is displayed. Step 2 Run: bridge bridge-id The bridge group view is displayed. Step 3 Run: bridging { ip | others } disable The bridge group is disabled from bridging specified protocol packets.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration By default, no static MAC address entry is configured. In a bridge group, each MAC address entry can be configured as only one static entry. If the MAC address entry is configured as a static entry repeatedly, the last configuration overwrites the previous configuration.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration Step 2 Run: bridge bridge-id A bridge group is created and the bridge group view is displayed. If the bridge group specified by bridge-id exists, the bridge group view is displayed.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration An IP address is configured for the Bridge-if interface. Step 7 (Optional) Run: mac-address mac-address A MAC address is configured for the Bridge-if interface. ----End 9.6.2.4 (Optional) Disabling a Bridge Group from Bridging Specified Protocol...
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration Step 2 Run: bridge bridge-id The bridge group view is displayed. Multiple devices can use the same bridge number. Step 3 Run: mac-address learning disable Dynamic MAC address learning is disabled.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration Run the display bridge traffic [ bridge bridge-id | interface interface-type interface- number ] command to view the traffic statistics on a specified interface in the bridge group.
Page 383
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration Figure 9-16 Networking diagram for adding users to bridge groups User 1 User 4 RouterA RouterB Network User 5 User 2 User 3 VLAN 11 Perform the following steps on the user-side interface of the device.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration 9.6.3.3 Adding a WAN-side Interface to a Bridge Group Context Two devices can be connected using different types of intermediate links, such as Ethernet, PPP, to bridge data between different LANs.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: bridge bridge-id The bridge group view is displayed. Step 3 Run: bridging { ip | others } disable The bridge group is disabled from bridging specified protocol packets.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration 9.6.3.6 (Optional) Configuring a MAC Address Table for a Bridge Group Context By default, dynamic MAC address learning is enabled for a bridge group. When a network is insecure and vulnerable to attacks, you can disable dynamic MAC address learning and use static MAC address entries for traffic forwarding.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration 9.6.3.7 Checking the Configuration Prerequisites The configurations for remote bridging are complete. Procedure Run the display bridge [ bridge-id ] information command to view information about the bridge group.
Page 388
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration Directly add users to the bridge group. User 1 uses this method. Use a VLAN to add users to the bridge group. Create a VLAN on a bridge and add users to the VLAN.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration A maximum of 20 interfaces can be added to a bridge group. Different types of interfaces can be added to the same bridge group. Layer 2 interfaces cannot be added to a bridge group.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration 9.6.4.4 Enabling IP Routing for a Bridge Group Context IP routing enables a bridge group to bridge and route packets. If IP routing is not enabled, all protocol packets can only be bridged.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration 9.6.4.5 (Optional) Disabling a Bridge Group from Bridging Specified Protocol Packets Context To allow a bridge group to forward specified protocol packets, enable the function that bridges the protocol packets on the bridge group.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration By default, dynamic MAC address learning is enabled for a bridge group. Step 4 Run: quit Return to the system view. Step 5 Configure a MAC address entry.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration 9.7.1 Monitoring the Operation of Bridge Groups Context During routine maintenance, you can run the following commands in any view to monitor the operation of bridge groups.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration 9.7.3 Clearing the Traffic Statistics on the Bridge-if Interface of a Bridge Group Context To locate faults in a bridge group, you can clear the traffic statistics on the Bridge-if interface.
Page 395
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration Figure 9-18 Networking diagram of local bridging configuration RouterA Eth2/0/2 Eth3/0/0 Eth2/0/1 Eth4/0/0 User 1 User 2 User 3 User 4 10.1.1.1/24 10.1.1.2/24 10.1.1.3/24 10.1.1.4/24...
Page 396
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration [RouterA-bridge2] quit Add Eth3/0/0 to bridge group 2. [RouterA] interface ethernet 3/0/0 [RouterA-Ethernet3/0/0] bridge 2 [RouterA-Ethernet3/0/0] quit Verify the configuration. # Run the display bridge information command to view the configuration of the bridge groups.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration 9.8.2 Example for Configuring Local Bridging with IP Routing Configuring local bridging and IP routing allows LANs on different network segments to communicate with each other.
Page 398
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration Configure RouterA. # Create bridge group 1 and enable local bridging and IP routing for the bridge group. <Huawei> system-view [Huawei] sysname RouterA [RouterA] bridge 1...
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration interface Ethernet3/0/0 undo portswitch ip address 10.1.3.1 255.255.255.0 interface Bridge-if1 ip address 10.1.1.3 255.255.255.0 return 9.8.3 Example for Configuring Remote Bridging Configuring remote bridging allows LANs on the same network segment but in different geographical locations to communicate with each other.
Page 400
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration Configuration Procedure Configure RouterA. # Create bridge group 1. <Huawei> system-view [Huawei] sysname RouterA [RouterA] bridge 1 [RouterA-bridge1] quit # Add Eth2/0/2 and Eth2/0/1 to VLAN 11 to allow the communication between User 1 and User 2.
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration Verify the configuration. # After the preceding configurations are complete, User 1, User 2, User 3, and User 4 can ping each other. Configuration Files...
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration Networking Requirements Departments of Enterprise A need to communicate with other and with Enterprises C (in a different geographical location). Departments of Enterprise A belong to the LANs on the same network segment and can be bridged, but Enterprise C belongs to a different network segment.
Page 403
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration <Huawei> system-view [Huawei] sysname RouterA [RouterA] bridge 1 [RouterA-bridge1] routing ip [RouterA-bridge1] quit [RouterA] bridge 2 [RouterA-bridge2] routing ip [RouterA-bridge2] quit # Add Eth2/0/1 and Eth2/0/2 to VLAN 11 to allow the communication between User 1 and User 2.
Page 404
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration [RouterB-Ethernet3/0/0] quit Verify the configuration. # After the preceding configuration is complete, User 1 and User 4 can successfully ping each other. Configuration Files Configuration file of RouterA...
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration 9.8.5 Example for Configuring Remote Bridging with VLAN ID Transparent Transmission Remote bridging with VLAN ID transparent transmission allows the devices in the same VLAN but different in locations to communicate with each other.
Page 406
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration Configure interfaces to allow the packets from VLAN 11 and VLAN 12 to pass through. On Router A and Router B: Configure bridge groups. Add WAN interfaces Ethernet1/0/0 and Ethernet2/0/0 to the same bridge group.
Page 407
Huawei AR530&AR550 Series Industrial Switch Routers Configuration Guide - Ethernet Switching 9 Transparent Bridging Configuration [Huawei] sysname RouterB [RouterB-bridge2] bridge 2 [RouterB-bridge2] quit # Add Ethernet1/0/0 and Ethernet2/0/0 to bridge group 2, and enable VLAN ID transparent transmission on the two interfaces.