Example for Configuring Interface-based Layer 2 Protocol Tunneling
Networking Requirements
As shown in Figure 14-6, CEs are edge devices on two private networks of an enterprise located in different areas, and PE1 and PE2 are edge devices on the ISP network. The two private networks of the enterprise are Layer 2 networks and they are connected through the ISP network. STP is run on the Layer 2 networks to prevent loops. Enterprise users require that STP run only on the private networks so that spanning trees can be generated correctly.
Configuration Roadmap
The configuration roadmap is as follows:
Configure STP on CEs to prevent loops on Layer 2 networks.
Add PE interfaces connected to CEs to specified VLANs so that PEs forward packets from the VLANs.
Configure interface-based Layer 2 protocol tunneling on PEs so that STP packets are not sent to the CPUs of PEs for processing.
Procedure
- Enable STP on CEs.
# Configure CE1.
<HUAWEI> system-view [~HUAWEI] sysname CE1 [*HUAWEI] commit [~CE1] vlan 100 [*CE1-vlan100] quit [*CE1] stp enable [*CE1] interface 10ge 1/0/1 [*CE1-10GE1/0/1] port link-type access [*CE1-10GE1/0/1] port default vlan 100 [*CE1-10GE1/0/1] quit [*CE1] commit
# Configure CE2.
<HUAWEI> system-view [~HUAWEI] sysname CE2 [*HUAWEI] commit [~CE2] vlan 100 [*CE2-vlan100] quit [*CE2] stp enable [*CE2] interface 10ge 1/0/1 [*CE2-10GE1/0/1] port link-type access [*CE2-10GE1/0/1] port default vlan 100 [*CE2-10GE1/0/1] quit [*CE2] commit
- Add 10GE1/0/1 on PE1 and PE2 to VLAN 100 and enable Layer 2 protocol tunneling on PEs.
# Configure PE1.
<HUAWEI> system-view [~HUAWEI] sysname PE1 [*HUAWEI] commit [~PE1] vlan 100 [*PE1-vlan100] quit [*PE1] interface 10ge 1/0/1 [*PE1-10GE1/0/1] port link-type access [*PE1-10GE1/0/1] port default vlan 100 [*PE1-10GE1/0/1] l2protocol-tunnel stp enable [*PE1-10GE1/0/1] quit [*PE1] commit
# Configure PE2.
<HUAWEI> system-view [~HUAWEI] sysname PE2 [*HUAWEI] commit [~PE2] vlan 100 [*PE2-vlan100] quit [*PE2] interface 10ge 1/0/1 [*PE2-10GE1/0/1] port link-type access [*PE2-10GE1/0/1] port default vlan 100 [*PE2-10GE1/0/1] l2protocol-tunnel stp enable [*PE2-10GE1/0/1] quit [*PE2] commit
If the remote device sends packets of non-standard protocols, first run the l2protocol-tunnel user-defined-protocol protocol-name protocol-mac protocol-mac [ encap-type { { ethernetii | snap } protocol-type protocol-type-value | llc dsap dsap-value ssap ssap-value } ] group-mac { group-mac | default-group-mac } command to define characteristics information about the Layer 2 transparent transmission protocol. Then run the l2protocol-tunnel user-defined-protocol protocol-name enable command to enable Layer 2 protocol tunneling.
- Configure PEs to replace the destination MAC address of STP packets received from CEs.
# Configure PE1.
[~PE1] l2protocol-tunnel stp group-mac 0100-5e00-0011 [*PE1] commit
# Configure PE2.
[~PE2] l2protocol-tunnel stp group-mac 0100-5e00-0011 [*PE2] commit
- Configure CE2 to the priority of a switching device is 4096.
[~CE2] stp priority 4096 [*CE2] commit
- Verify the configuration.
# After the configuration is complete, run the display l2protocol-tunnel group-mac command on PEs. You can view the protocol type or name, multicast destination MAC address, group MAC address, and priority of Layer 2 protocol packets to be transparently transmitted.
The display on PE1 is used as an example.
[~PE1] display l2protocol-tunnel group-mac stp Protocol EncapeType ProtocolType Protocol-MAC Group-MAC Pri ----------------------------------------------------------------------------- stp llc dsap 0x42 0180-c200-0000 0100-5e00-0011 0 ssap 0x42
# After 30s, Run the display stp brief command on CE1 and CE2 to view the root in the MSTP region. You can find that a spanning tree is calculated between CE1 and CE2. 10GE1/0/1 on CE1 is the root port and 10GE1/0/1 on CE2 is the designated port.
[~CE1] display stp brief MSTID Port Role STP State Protection Cost Edged 0 10GE1/0/1 ROOT forwarding none 2000 disable[~CE2] display stp brief MSTID Port Role STP State Protection Cost Edged 0 10GE1/0/1 DESI forwarding none 2000 disable
Configuration Files
CE1 configuration file
# sysname CE1 # vlan batch 100 # interface 10GE1/0/1 port default vlan 100 # return
CE2 configuration file
# sysname CE2 # vlan batch 100 # stp instance 0 priority 4096 # interface 10GE1/0/1 port default vlan 100 # return
PE1 configuration file
# sysname PE1 # vlan batch 100 # l2protocol-tunnel stp group-mac 0100-5e00-0011 # interface 10GE1/0/1 port default vlan 100 l2protocol-tunnel stp enable # return
PE2 configuration file
# sysname PE2 # vlan batch 100 # l2protocol-tunnel stp group-mac 0100-5e00-0011 # interface 10GE1/0/1 port default vlan 100 l2protocol-tunnel stp enable # return