Configuring control vlans, Configuring protected vlans – H3C Technologies H3C S10500 Series Switches User Manual
Page 69
60
To do…
Use the command…
Remarks
Enter system view
system-view
—
Create an RRPP domain, and enter
RRPP domain view
rrpp domain domain-id
Required
Configuring control VLANs
Before configuring RRPP rings in an RRPP domain, configure the same control VLANs for all nodes in the
RRPP domain first.
Perform this configuration on all nodes in the RRPP domain to be configured.
Follow these steps to configure control VLANs:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Enter RRPP domain view
rrpp domain domain-id
—
Specify the primary control VLAN
for the RRPP domain
control-vlan vlan-id
Required
NOTE:
•
When you configure existing VLANs as control VLANs, the system prompts errors.
•
To ensure proper forwarding of RRPPDUs, do not enable 802.1Q in 802.1Q (QinQ) or VLAN mapping
on the control VLANs.
•
To ensure that RRPPDUs can be sent and received correctly, do not configure the default VLAN of a port
accessing an RRPP ring as the primary control VLAN or the secondary control VLAN.
•
To transparently transmit RRPPDUs on a device not configured with RRPP, you must ensure only the two
ports connecting the device to the RRPP ring permit the packets of the control VLANs. Otherwise, the
packets from other VLANs may go into the control VLANs in transparent transmission mode and strike
the RRPP ring.
Configuring protected VLANs
Before configuring RRPP rings in an RRPP domain, configure the same protected VLANs for all nodes in
the RRPP domain first. All VLANs that the RRPP ports are assigned to should be protected by the RRPP
domains.
You can configure protected VLANs through referencing Multiple Spanning Tree Instances (MSTIs).
Before configuring protected VLANs, configure the mappings between MSTIs and the VLANs to be
protected (a device working in PVST mode automatically maps VLANs to MSTIs). For more information
about MSTIs and PVST, see Layer 2—LAN Switching Configuration Guide.
Perform this configuration on all nodes in the RRPP domain to be configured.
Follow these steps to configure protected VLANs:
To do…
Use the command…
Remarks
Enter system view
system-view
—
- H3C S5800 Series Switches H3C S5820X Series Switches H3C WX3000E Series Wireless Switches H3C SecPath F1000-E H3C SecPath F5000-A5 Firewall H3C SecPath F1000-A-EI H3C SecPath F1000-E-SI H3C SecPath F1000-S-AI H3C SecPath F5000-S Firewall H3C SecPath F5000-C Firewall H3C SecPath F100-C-SI H3C SecPath F1000-C-SI H3C SecPath F100-A-SI H3C SecBlade FW Cards H3C SecBlade FW Enhanced Cards H3C SecPath U200-A U200-M U200-S H3C SecPath U200-CA U200-CM U200-CS