iv
Configuration restrictions and guidelines ································································································· 98
Configuration procedure ··························································································································· 98
Configuring protection functions ······················································································································ 98
Enabling BPDU guard ······························································································································ 99
Enabling root guard ·································································································································· 99
Enabling loop guard ······························································································································· 100
Configuring port role restriction ·············································································································· 100
Configuring TC-BPDU transmission restriction ······················································································ 101
Enabling TC-BPDU guard ······················································································································ 101
Enabling BPDU drop ······························································································································ 102
Displaying and maintaining the spanning tree ······························································································· 102
Spanning tree configuration example ············································································································ 103
MSTP configuration example ················································································································· 103
PVST configuration example ·················································································································· 107
Configuring loop detection ·········································································· 110
Overview ························································································································································ 110
Loop detection mechanism ···················································································································· 110
Loop detection interval ··························································································································· 111
Loop protection actions ·························································································································· 111
Port status auto recovery ······················································································································· 111
Loop detection configuration task list ············································································································· 112
Enabling loop detection ·································································································································· 112
Enabling loop detection globally············································································································· 112
Enabling loop detection on a port··········································································································· 112
Configuring the loop protection action ··········································································································· 113
Configuring the global loop protection action ························································································· 113
Configuring the loop protection action on a Layer 2 Ethernet interface ················································· 113
Configuring the loop protection action on a Layer 2 aggregate interface··············································· 113
Setting the loop detection interval ·················································································································· 113
Displaying and maintaining loop detection ····································································································· 114
Loop detection configuration example ··········································································································· 114
Network requirements ···························································································································· 114
Configuration procedure ························································································································· 114
Verifying the configuration ······················································································································ 115
Configuring VLANs ····················································································· 117
Overview ························································································································································ 117
VLAN frame encapsulation ···················································································································· 117
Protocols and standards ························································································································ 118
Configuring basic VLAN settings ··················································································································· 118
Configuring basic settings of a VLAN interface ······························································································ 119
Configuring port-based VLANs ······················································································································ 120
Introduction ············································································································································ 120
Assigning an access port to a VLAN ······································································································ 121
Assigning a trunk port to a VLAN ··········································································································· 122
Assigning a hybrid port to a VLAN ········································································································· 122
Configuring MAC-based VLANs ···················································································································· 123
Introduction ············································································································································ 123
Configuration restrictions and guidelines ······························································································· 126
Configuring static MAC-based VLAN assignment ·················································································· 126
Configuring dynamic MAC-based VLAN assignment ············································································· 127
Configuring server-assigned MAC-based VLAN ···················································································· 127
Configuring IP subnet-based VLANs ············································································································· 128
Configuring protocol-based VLANs ················································································································ 129
Configuring a VLAN group ····························································································································· 130
Displaying and maintaining VLANs ················································································································ 131
VLAN configuration examples ························································································································ 131
Port-based VLAN configuration example ······························································································· 131
MAC-based VLAN configuration example ······························································································ 133
IP subnet-based VLAN configuration example ······················································································ 135
Protocol-based VLAN configuration example ························································································ 136