HP+Networking+Interoperability+ +Lab+Guide+Rev+11.12

HP Networking Interoperability
Lab Guide
Version 11.12
y
nl
O
Se
alU
rn
te
In
P
r H
Fo

 Copyright 2010 Hewlett-Packard Development Company, L.P.
The information contained herein is subject to change without notice. The only warranties for HP products and
services are set forth in the express warranty statements accompanying such products and services. Nothing
herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial
errors or omissions contained herein.
This is an HP copyrighted work that may not be reproduced without the written permission of HP. You may not use
these materials to deliver training to any person outside of your organization without the written permission of HP.
Lab Guide
y
Rev. 11.12
nl
O
Se

a lU
rn

te
In
P

r H
Fo
Contents
Lab 2.1: Management

Objectives ................................................................................................. L2.1-1
Lab equipment ........................................................................................... L2.1-1
Lab steps ...................................................................................................L2.1-2
Cabling ....................................................................................... L2.1-3
Initial setup .................................................................................. L2.1-4
Command reference ................................................................................. L2.1-13
Lab 3.1: Configuring VLANs
y
nl
Objectives ................................................................................................. L3.1-1
Lab equipment ........................................................................................... L3.1-1
O
Port naming ................................................................................. L3.1-2
Lab steps .................................................................................................. L3.1-2
Se
lU
Lab 4.1: Implementing MSTP on Cisco and HP Switches
Objectives .................................................................................................L4.1-1
a
Lab equipment ...........................................................................................L4.1-1

rn
Lab steps .................................................................................................. L4.1-2

te
Activate MSTP ..................................................................................... L4.1-3

Configure the MSTP region ................................................................... L4.1-7
In
Explore MSTP operations ................................................................... L4.1-10

P

H
Lab 5.1: Configuring PVST+/MSTP Interoperability: Cisco at the

Aggregation Layer
r
Fo
Objectives ................................................................................................. L5.1-1

Lab equipment ........................................................................................... L5.1-1
Lab steps .................................................................................................. L5.1-2
Complete initial setup .......................................................................... L5.1-2
Configure PVST+ on Cisco and MSTP on HP ........................................... L5.1-3
Verify the -spanning tree operations ....................................................... L5.1-6
Configure PVST+ ................................................................................. L5.1-8
Implement load balancing between VLANs (optional) .............................. L5.1-9
Save your configuration ...................................................................... L5.1-11
Rev. 11.12 i
Lab 5.2: Configuring PVST+/MSTP Interoperability: HP

at the Aggregation Layer
Objectives ................................................................................................ L5.2-1
Lab equipment .......................................................................................... L5.2-1
Lab steps .................................................................................................. L5.2-2
Complete the initial setup .................................................................... L5.2-2
Configure PVST+ on Cisco and MSTP on HP .......................................... L5.2-3
Verify the configuration ....................................................................... L5.2-4
Adjust the configuration ...................................................................... L5.2-5
Implement load balancing ................................................................... L5.2-5
Implement VRRP on HP Distribution ....................................................... L5.2-6
Lab 6.1: Implementing Redundant Links Without STP
y
nl
Objectives ................................................................................................. L6.1-1
O
Lab equipment ........................................................................................... L6.1-1
Lab steps .................................................................................................. L6.1-2
Se
Complete the initial setup ..................................................................... L6.1-2
Disable STP on the HP Edge switches ..................................................... L6.1-3
lU
Configure and test smart link ................................................................ L6.1-7
Configure a monitor link on the HP A-Series switches (optional) ................ L6.1-9
a

rn
Lab 7.1: Configuring Spanning Tree Hardening

te
Objectives ................................................................................................. L7.1-1

In
Lab equipment ........................................................................................... L7.1-1

Lab steps ................................................................................................... L7.1-2
P
Configure and test BPDU guard/BPDU protection ..................................... L7.1-3

H
Configure loop protect on an HP E-Series switch ....................................... L7.1-7

Implement BPDU filtering ..................................................................... L7.1-10
r
Fo
Configure root guard .......................................................................... L7.1-12

Command reference ..................................................................................L7.1-15
Lab 8.1: Configuring Link Aggregation and IRF

Objectives .................................................................................................L8.1-1
Lab equipment ...........................................................................................L8.1-1
Port naming ................................................................................. L8.1-2
Lab steps .................................................................................................. L8.1-2
Configure IRF...................................................................................... L8.1-2
Configure a link aggregation between the access switches
and the IRF ......................................................................................... L8.1-6
ii Rev. 11.12
Contents
Lab 9.1: Configuring VRRP

Objectives ................................................................................................. L9.1-1
Lab equipment ........................................................................................... L9.1-1
Devices .............................................................................................. L9.1-2
Cabling ............................................................................................. L9.1-2
Lab steps .................................................................................................. L9.1-3
Setup of the initial LAN ........................................................................ L9.1-3
Configure HSRP on Cisco routing switches.............................................. L9.1-4
Configure DHCP ................................................................................. L9.1-5
VRRP configuration on HP routing switches ............................................. L9.1-9
Migration of the access layer switches .................................................. L9.1-12
Lab 10.1: Configuring OSPF Areas
y
nl
Objectives ............................................................................................... L10.1-1
O
Lab equipment ......................................................................................... L10.1-1
Lab steps ................................................................................................. L10.1-2
Se
Initial setup....................................................................................... L10.1-2
Configure OSPF areas and interfaces .................................................. L10.1-3
lU
Configure area summarization ............................................................ L10.1-6
Configure a totally stubby area and NSSA ........................................... L10.1-8
a
Command reference ................................................................................ L10.1-11

rn
Lab 10.2: Configuring OSPF Redistribution

te
Objectives .............................................................................................. L10.2-1

In
Lab equipment ........................................................................................ L10.2-1

Lab steps ................................................................................................ L10.2-2
P
Initial setup....................................................................................... L10.2-2

H
Set up OSPF ..................................................................................... L10.2-3

Configure OSPF redistribution ............................................................. L10.2-5
r
Fo
Change the administrative distance of external networks, tag imported

networks, and filter the tagged networks .............................................. L10.2-7
Command reference ............................................................................... L10.2-11
Appendix A: Switch Configurations
Rev. 11.12 iii

PAGE INTENTIONALLY LEFT BLANK
y
nl
O
Se
lU
a
rn
te
In
P
r H
Fo
iv Rev. 11.12
Management
Module 2 Lab 1
Objectives
In this lab, you will practice configuring VLANs on HP A-Series, HP-E-Series, and
Cisco switches. You will ensure that uplink ports are configured to enable traffic flow
on a multivendor network.
After completing this lab, you will be able to:
 Configure the minimal commands required to enable HP Intelligent Management
Center (IMC) to discover HP A-Series, HP-E-Series, and Cisco switches
y
Create templates in IMC to secure access to HP A-Series, HP-E-Series, and Cisco
nl

switches
O
Lab equipment
Cisco-A Cisco-B
Se
lU
IP addressing:
Names: 10.POD.VLAN.X/24
a
HP-C HP-D •Cisco-A=Catalyst 3750 X=1 on Cisco-A

rn
•Cisco-B=Catalyst 3750 X=2 on Cisco-B

te
•HP-C=HP A5800 X=3 on HP-C

HP-E HP-F
•HP-D= HP A5800 X=4 on HP-D
In
•HP-E= HP E3500 X=5 on HP-E

•HP-F=HP E3500 X=6 on HP-F
P
H
Server_1 Client_1
IMC XP
•Server_1= Windows 2008 Server X=100 on Server_1
•Client_1= Client X=101 on Client_1
r
Fo
Figure 2-1: Configuring VLANs
You will need the following equipment:

 Devices:
 Two Cisco 3750 switches in the aggregation layer
 Two HP A5800 switches and two HP-E3500 switch in the access layer
 Two laptops
The table above gives you: the names for the devices and their IP addresses
Rev. 11.12 L2.1 –1

Lab steps
Complete the following steps:
1. The show, display, and debug commands are your tools to:
 Verify a configuration is working
 Determine whether or not the components are active
 Identify why something is failing
Along your lab, list useful display or show commands and note the type of
information they provide. Copy them in the space provided below.
In particular, note the show, display, and debug commands that provide:
 Link Layer Discovery Protocol (LLDP) neighbor information: name IP address,
y
remote ports
nl
O
 IP addressing
 Simple Network Management Protocol (SNMP) setup and status

Se
Logging setup and logging information in buffer and on terminal
lU
____________________________________________________________________
a
____________________________________________________________________
rn
te
____________________________________________________________________
In
____________________________________________________________________
P
H
____________________________________________________________________
r
Fo
____________________________________________________________________
____________________________________________________________________
____________________________________________________________________
____________________________________________________________________
____________________________________________________________________
You will share these commands in the lab debrief.
L2.1 –2 Rev. 11.12

Lab 2.1: Management
Cabling
2. Connect the switches and PCs as shown in Figure 2.2.
IP addressing:
10.POD.VLAN.X/24
Cisco-A Cisco-B
P3 P3 X=1 on Cisco-A
P1 P1 P2 X=2 on Cisco-B
P2
VLAN 1 X=3 on HP-C

X=4 on HP-D
P1 P1 P1 P1
HP-C HP-E HP-C HP-E X=5 on HP-E
X=6 on HP-F
X=100 on Server_1
X=101 on Client_1
y
Server_1 Client_1
IMC XP
nl
O
Px=Gigabit Port,
Px= 10 Gigabit port
Se
In the figure, the ports used for various connections are labeled P1, P2, and P3.
lU
Ask your instructor what guidelines to use for selecting the interfaces for P1, P2
and P3 on each device. Record the interface IDs in the table below.
a
rn
Switches Port Interface Gigabit

Cisco-A P1
te
P2
In
P3
P4
Cisco-B P1
P
P2
H
P3
P4
r
HP-C P1
Fo
P2
P3
HP-D P1
P2
P3
HP-E P1
P2
P3
HP-F P1
P2
P3
Rev. 11.12 L2.1 –3

Initial setup
3. Verify that the switch is set to factory default settings. If necessary, erase the
configuration and the reboot switch.
On Cisco switches, enter:
Cisco-A# erase startup-configuration
Cisco-A# reload
On HP A-Series switches, enter:

<HP-C> reset saved-configuration
<HP-C> reboot
Note
You can verify that no config.cfg file exists in the HP A-Series device’s flash
y
memory with this command: dir flash:
nl
O
On HP E-Series switches, enter:
HP-E# erase startup
Se
HP-E# reload
lU
____________________________________________________________________
4. On Server_1 (Windows 2008 server/IMC) set the IP address to 10.POD.1.100,
a
in which POD is your POD number.

rn
____________________________________________________________________
te
5. On Client_1 (Windows XP) set the IP address to 10.POD.1.101

In
____________________________________________________________________
P
6. On every switch, set the system or hostname as shown in Figure 2-2.

H
7. Configure static IP addresses on switches in VLAN 1 as shown in Figure 2-2. Set

the IP address to 10.POD.VLAN.X/24, in which POD is your POD number and
r
Fo
the VLAN is 1.
8. Configure a default gateway for each switch at 10.POD.1.254.
Note
On Cisco and HP A-Series switches, make sure that the VLAN interfaces are not
shutdown.
9. On Server_1 (IP address 10.POD.1.100), which is running IMC, verify

connectivity with each switch.
10. On all switches, complete the following steps:
a. Enable LLDP and verify LLDP neighbors.
Cisco-A(config)# lldp run
L2.1 –4 Rev. 11.12

Lab 2.1: Management

[HP-C] lldp enable
On HP E-Series switches, LLDP is enabled by default:

HP-E(config)# lldp run
b. Verify the LLDP information that your switches are receiving from their
neighbors, including the neighbors’ name, IP address, and connections.
Cisco-A# show lldp neighbors

[HP-C] display lldp neighbor-information list
y
nl
HP-E(config)# show lldp info remote
 Does the LLDP information match your connection settings?
O
_____________________________________________________________________
Se
_____________________________________________________________________
a lU
 Enter show cdp neighbors on Cisco-A or B and on HP-E or F. Do you see
rn
CDP neighbors? What can you conclude?

te
_____________________________________________________________________
In
_____________________________________________________________________
P
H
11. On all switches, enable SNMP V2c if it is not enabled yet. Then complete these
tasks:
r
Fo
a. Define a SNMP V2 RO community called public.

b. Define a SNMP V2 RW community called private.
c. Define interface vlan 1 as source-interface for trap
Cisco-A(config)# snmp-server community public ro
Cisco-A(config)# snmp-server community private rw
Cisco-A(config)# snmp-server source-interface vlan 1
On HP A-Series switches, you must enable the SNMP agent

[HP-C] snmp-agent sys-info version v2c
[HP-C] snmp-agent community write private
[HP-C] snmp-agent community read public
Rev. 11.12 L2.1 –5

[HP-C] snmp-agent trap source vlan-interface 1
On HP E-Series switches, SNMP V2 is enabled by default with public set as the

RW community. On these switches, you specify the source interface as an IP
address if you want to use a VLAN interface or using a loopback keyword if you
want to use a loopback interface.
HP-E(config)# no snmp-server community public
HP-E(config)# snmp-server community private manager
unrestricted
HP-E(config)# snmp-server community public operator
unrestricted
On HP-E, enter:
HP-E(config)# snmp-server trap-source 10.POD.1.5
On HP-F, enter:
y
nl
HP-E(config)# snmp-server trap-source 10.POD.1.6
O
12. Enable Telnet authentication. For the lab environment, you will configure Telnet to
provide enabled/privileged level access without the user authenticating.
Se
lU
Cisco-A(config)# line vty 0 4
Cisco-A(config-line)# no login
a
Cisco-A(config-line)privilege level 15
rn
On HP A-Series switches, you must enable the Telnet server. Enter these
te
commands:
In
[HP-C] telnet server enable

[HP-C] user-interface vty 0 4
P
[HP-C-ui-vty0-4] authentication-mode none

H
[HP-C-ui-vty0-4] user privilege level 3

r
On HP E-Series switches, Telnet is enabled by default. In addition, the default

Fo
setting is to provide enable level access without the user entering a password.
Therefore, you do not need to enter any commands on HP-E or HP-F.
 From Client_1 (the Windows client), use Teraterm to verify Telnet access to
each device.
 Verify that you have received enabled/privileged level access.
_____________________________________________________________
_____________________________________________________________
_____________________________________________________________
L2.1 –6 Rev. 11.12

Lab 2.1: Management
 How do you determine which Telnet sessions are established with which
devices?
_____________________________________________________________
_____________________________________________________________
_____________________________________________________________
 How do you break a Telnet session?

_____________________________________________________________
y
_____________________________________________________________
nl
O
_____________________________________________________________
Se
13. Save the configuration of your devices for later use and define it as the startup-
config.
lU
a
Cisco-A# write memory

rn
Cisco-A# copy running flash:interop-2a.cfg

te
Cisco-A# dir flash:

In
Cisco-A(config)# boot config flash:interop-2a.cfg

Cisco-A# show boot
P
Entering write mem later will overwrite this configuration, so take care.
H

r
Fo
<HP-C> save interop-2a.cfg

<HP-C> dir /all
<HP-C> startup saved interop-2a.cfg
<HP-C> display startup
Entering save later will overwrite this configuration, so take care.

On HP E-Series switches:
HP-E# write mem
HP-E# show config-files
The default config file name should be config1. Rename the file to interop2a.
HP-E# copy config config1 config interop2a
Enter this command to make this configuration the default startup-config:

HP-E(config)# startup-default config interop2a
Rev. 11.12 L2.1 –7
14. In this step, you will explore the Basic Auto-discovery function in IMC.
a. On Client_1 (the Windows client) or on Server_1 (which runs IMC,) launch
a browser and navigate to this URL:
http://10.POD.1.100:8080/
b. Log in with the following login credentials:
Username: admin
Password: admin
c. Click the Home tab in the horizontal menu bar.
d. On left side of screen, locate the Function Navigation window.
e. Locate the Auto-Discovery shortcut.
y
nl
O
Se
a lU
rn
te
In
P
H
Figure 2-3: IMC—Home > Auto Discovery

r
f. You have two ways to enable auto-discovery:

Fo
 Basic Auto-Discovery, which is quicker

 Advanced Auto-Discovery, which provides more options
L2.1 –8 Rev. 11.12

Lab 2.1: Management
y
nl
Figure 2-4: IMC—Resource > Resource Management > Auto Discovery
O
g. You will first use Basic Auto-Discovery. Follow these steps:
1) Click Auto-Discovery.
Se
lU
2) In the Auto-Discovery (Basic) page, configure these settings:
 Start IP: 10.POD.VLAN.1
a
End IP: 10.POD.VLAN.6

rn

 SNMP Read Community: public
te
 SNMP write Community: private

In
3) Select the Telnet settings check box.

P
What settings should you configure for Telnet considering your switch
H
setup?
___________________________________________________________
r
Fo
___________________________________________________________
___________________________________________________________
4) Select the Enable periodic discovery check box. Schedule the recurrent
discovery to 1 hour for the lab environment.
In a real-world environment, what value would you set?
___________________________________________________________
___________________________________________________________
Rev. 11.12 L2.1 –9

y
nl
O
Se
Figure 2-5: IMC—Resource > Resource Management > Auto Discovery (Basic Settings)
5) Click Auto Discovery to initiate discovery of your devices.

lU
15. List auto-discovered devices.
a
a. Click the Home tab.

rn
b. Do you see your devices listed under View snapshot and Switches?
te
If not, troubleshoot as follows, beginning by verifying the basics:

In
1) Can you ping the device from Server_1 (the Windows Server 2008)?
P
2) Are the SNMP RO and RW communities the same on the device and
H
on IMC?
 RO = public
r
Fo
 RW = private
3) Verify that you can access the devices using Telnet without a password
and that you access the privileged level. You can also review your
Telnet settings on the switch.
If the previous settings are correct, attempt to use Manual Discovery in IMC.
1) Select the Home > Function Navigation tabs, or select the Resource >
Resource Management tabs.
2) Find the Add Device option.
3) Enter your device’s IP address, SNMP information, and Telnet settings
to discover the device manually.
L2.1 –10 Rev. 11.12

Lab 2.1: Management
y
nl
O
Se
Figure 2-6: IMC > Resource > Resource Management > Add Device
lU
Your devices might be classified as Desktop, which refers to devices with
a
ICMP enabled (they are pingable) but SNMP disabled. If your devices are
rn
classified as Desktop, what can you do to fix this?

1) Double-check the SNMP setup on the devices and in IMC.
te
2) Try to discover the device manually after have deleted it from the Snap-
In
Shot views.
P
16. In this step, you enable SSH on devices. Keep in mind that IMC does not create
H
SSH public keys. On all your switches, configure the following:

r
a. Set the crypto public key and enable SSH if it is not enabled yet.
Fo

Cisco-A(config)# crypto key generate rsa usage-keys modulus
1024
Cisco-A(config)# ip ssh version 2

[HP-C] public-key local create rsa
[HP-C] ssh server enable
On HP E-Series, a key is created by default (in the up-to-date software). If you

need to generate a key, enter this command:
HP-E(config)# crypto key generate ssh rsa
HP-E(config)# ip ssh
The latter command is enabled by default.

Rev. 11.12 L2.1 –11
b. Attempt to establish an SSH connection from Server_1 (the Windows Server

2008) using TeraTerm 4.1 or the Putty application.
17. Do not save your configuration. You will not use this configuration in later labs.
However, you can save the configuration for your own records if you want. In
this case, you can either:
 View the running-config and copy and paste it in your own text file.
 Save the configuration using a different name than the one previously set
(which was interop2a).
y
nl
O
Se
a lU
rn
te
In
P
r H
Fo
L2.1 –12 Rev. 11.12

Lab 2.1: Management
Command reference
HP-E-Series Commands
Description Command syntax
Configure hostname hostname <hostname>
Configure ports as untagged vlan <ID> untagged <port ID list>
members of VLANs.
Configure ports as tagged members vlan <ID> tagged <port ID list>
of VLANs.
Assign an IP address to a VLAN vlan <ID> ip address [IP address subnet mask | IP
interface. address/prefix length]
Disable SNMP v2 public community no snmp-server community public
Configure a read-write SNMP v2c snmp-server community <community_name> manager
community unrestricted
Configure a read-only SNMP v2c snmp-server community <community_name> operator
y
community restricted
nl
Set the SNMP trap source address. snmp-server trap-source [loopback <ID> | IP address]
Show the saved configuration files. show config-files
O
Set the configuration file for the startup-default config <filename>
startup-config.
Se
Reboot the switch. reload
Save the running configuration. write memory
lU
Copy a saved configuration to a new copy config <source filename> config <destination
configuration file. filename>
a
HP A-Series Commands
rn

te
Configure a host, or system, name sysname <system name>

In
Create a VLAN interface interface vlan-interface <ID>

P
Configure a port as a trunk port. interface <type> <number>

port-link-type trunk
H
Set the native (untagged) port trunk pvid vlan <VLAN ID>
VLAN.
r
Fo
Set the tagged VLANs. port trunk permit vlan <VLAN ID list>
Configure a port as an access port in interface <type> <number>

a VLAN. port-link-type access
port access vlan <VLAN ID>
Assign an IP address to a VLAN interface vlan-interface <ID>
interface. ip address <IP address> <subnet mask | prefix length>
Create a default route. ip route-static 0.0.0.0 0 <default gateway address>
Configure a VLAN to receive an IP interface vlan <ID>

address through DHCP ip address dhcp-alloc
quit
Configure SNMP v2c communities snmp-agent trap source vlan-interface <ID>
snmp-agent sys-info version v2c
snmp-agent community write <community_name>
snmp-agent community read <community_name>
Rev. 11.12 L2.1 –13

Configure SNMP trap receiver snmp-agent target-host trap address udp-domain <ip
address> params securityname public V2C
Enable Telnet access without user-interface vty 0 15
authentication authentication-mode none
user privilege level 3
quit
Show the file system. dir /all
Set the configuration file for the startup saved-configuration <filename>

startup-config.
Reboot the switch. reboot
Save the running configuration as a save <filename>

named file.
View the current file for the startup- display startup
y
config.
nl
O
Cisco Commands
Se
System name hostname <hostname>
Configure a VLAN to receive an IP interface vlan <ID>
lU
address through DHCP ip address dhcp
no shut
Configure an SNMP v2c read-write snmp-server community <community> rw
a
community
rn
Configure SNMP traps snmp-server enable traps

te
snmp-server source-interface loopback 0

snmp-server host <ip address> version 2c
In
Enable Telnet access without line vty 0 4

authentication no login
P
privilege level 15
View the files used on booting. show boot
r H
View the file system dir flash:

Fo
Save the running-config. write memory
Copy the running-config to a saved copy running flash:<filename>

configuration file.
Specify the saved configuration file boot config flash:<filename>
for the configuration that loads on
startup.
Reboot. reload
L2.1 –14 Rev. 11.12

Configuring VLANs
Module 3 Lab 1
Objectives
 Configure VLANs, trunk ports, and access ports
 Configure IP addresses, IP routing, and Dynamic Host Configuration Protocol
(DHCP)
 Configure VLAN trunking protocol (VTP) and GARP VLAN Registration Protocol
(GVRP)
y
nl
Lab equipment
O
P3 P3
Se
Cisco-A Cisco-B
P1 P2 P1 P2
lU
Uplinks
Untagged in VLAN 1,
Tagged in VLAN 11, 12 & 13
a
P1 P2
rn
P2
HP-C P1 HP-E
A-Series E-Series
te
P3 P3
In
PC1 PC2
P
H
Trunk 802.1q port Trunk/802.1q port

Connected Not Connected
To be configured
r
for later labs

Fo
In this lab, you will practice configuring VLANs. You will need the following
equipment:
 Devices:
 Two Cisco 3750 switches in the aggregation layer
 One HP A5800 switch and one HP E3500 switch in the access layer
 Two laptops, one connected to the HP A-Series switch and one connected to
the HP E-Series switch
 Cabling:
 As shown in Figure 3-1
Rev. 11.12 L3.1 –1
Port naming
Use the port mapping table that you created during Lab 2.1: Management.
Switches Port Interface Gigabit

Cisco-A P1
P2
P3
P4
Cisco-B P1
P2
P3
P4
HP-C P1
P2
y
P3
nl
HP-E P1
P2
O
P3
Lab steps Se
lU
1. As you complete the lab, take note of the show and display commands you will
a
use to verify and troubleshoot your configuration. Specifically, note which

rn
commands allow you to answer questions such as:

te
 Which VLANs are configured?

In
 Which ports are trunk ports? Which are access ports?

 Which ports are in VLAN X? Are they tagged or untagged?
P
H
 Which VLANs are configured on a given port?

r

Fo
_____________________________________________________________________
_____________________________________________________________________
_____________________________________________________________________
_____________________________________________________________________
_____________________________________________________________________
2. Make sure that the cables are connected as shown in Figure 3-1.
Note that the links indicated by dotted lines in the diagram represent
connections that you do not create in this lab. You are configuring the ports for
later use in the labs that cover spanning tree protocols (STP).
L3.1 –2 Rev. 11.12

Configuring VLANs
3. On each switch, load the interop2a configuration that you saved in the previous
lab (Lab 2: Management). This configuration contains the switch’s basic
configuration: name of the device, IP address in VLAN 1, default gateway, LLDP
enabled, and Telnet enabled without authentication and with privileged access.
a. Verify that the interop2a config file is the startup configuration.
b. If not, make it the startup configuration and reboot.
On Cisco switches (both Cisco-A and Cisco-B), enter:
Cisco-A# show boot
Cisco-A(config)# boot config flash:interop2a.cfg
Cisco-A# reload
On the HP A-Series switch (HP-C), enter:
y
nl
<HP-C> startup saved interop2a.cfg
O
<HP-C> reboot
On the HP E-Series switch (HP-E), enter:

Se
lU
HP-E# reload
a
4. In this step, you will create the VLANs, configure the trunk/tagged ports, and
rn
configure the access ports.

te
a. Create VLANs 11, 12, and 13 on all switches.

In
On Cisco switches (both Cisco-A ad Cisco-B), enter:

P
Cisco-A(config)# vlan 11-13

H

r
[HP-C] vlan 11 to 13
Fo

HP-E(config)# vlan 11
HP-E(vlan-11)# vlan 12
What are the show and display commands that list the created VLANs?
Cisco:______________________________________________________________
_____________________________________________________________________
HP A-Series:__________________________________________________________
_____________________________________________________________________
Rev. 11.12 L3.1 –3
HP E-Series:__________________________________________________________
_______________________________________________________________
b. Configure the uplink ports (connected or not) of each switch as trunk ports.
Note
We use the word “trunk” as used on Cisco and HP A-Series. On HP E-Series
switches, the term trunk refers to a link-aggregation group. All ports can accept
untagged and tagged VLAN assignments.
On Cisco switches, configure a range of ports, P1 to P4, as trunks:

Cisco-A(config)# interface range gi 1/0/1-4
y
Cisco-A(config-if-range)# switchport trunk encapsulation
nl
dot1q
Cisco-A(config-if-range)# switchport mode trunk
O
On the HP A-Series switch, configure both uplinks as trunks:
Se
[HP-C] interface GigabitEthernet1/0/1
[HP-C-GigabitEthernet1/0/1] port link-type trunk
lU
[HP-C-GigabitEthernet1/0/1] port trunk permit vlan all
a
[HP-C] interface GigabitEthernet1/0/2
rn
[HP-C-GigabitEthernet1/0/2] port link-type trunk

te
[HP-C-GigabitEthernet1/0/2] port trunk permit vlan all

In
Note
Do not forget to permit VLANs on the trunk. On HP A-Series switches, none are
P
enabled by default except VLAN 1.

H
On HP A-Series switches, you can alternatively create a manual port group and
r
then configure that group as a trunk:

Fo
[HP-C] port-group manual Uplinks

[HP-C-port-group-manual-Uplinks] group-member Gi 1/0/1 to
Gi 1/0/2
[HP-C-port-group-manual-Uplinks] port link-type trunk
[HP-C-port-group-manual-Uplinks] port trunk permit vlan all
[HP-C] display vlan 11 to 13
On the HP E-Series switch, you configure VLAN tagging on a port from the
VLAN context:
HP-E(vlan-11)# tagged 1-2
L3.1 –4 Rev. 11.12

Configuring VLANs
You can also enter this command in this way:

HP-E(config)# vlan 11 tagged 1-2
Note
By default, all E-Series switch ports are untagged in VLAN 1 by default. You can
changed the untagged membership with this command: vlan <vlan_ID>
untagged <port-list>.
What are the show and display commands on the different platforms that
display the status of trunk ports and the VLANs that they support?
y
nl
Cisco: ______________________________________________________________
O
_____________________________________________________________________
Se
lU
HP A-Series:__________________________________________________________
a
_____________________________________________________________________
rn
te
HP E-Series:__________________________________________________________
In
_____________________________________________________________________
P
H
c. On HP-C and E, make sure that P3 is configured as an access port in VLAN

r
1.
Fo
d. Make sure that Server_1 is connected on port P3 of HP-C and that PC2 is
connected on port P3 of HP-E.
e. Verify that Server_1 (10.POD.1.100) can ping PC2 (10.POD.1.101).
f. On Cisco-A, HP-C, and HP-E, choose a range of three ports that are not
connected. Configure these ports as access ports in VLAN 11. (If not enough
ports are available, you can choose fewer.)
Cisco-A(config)#interface range gigabit 1/0/10-12
Cisco-A(config-if-range)#switchport mode access
Cisco-A(config-if-range)#switchport access vlan 11
On HP A-Series switches, configure the ports using a manual port group. Enter:
Rev. 11.12 L3.1 –5

[HP-C]port-group manual Edges

[HP-C-port-group-manual-Edges]group-member Gi 1/0/10 to Gi
1/0/12
[HP-C-port-group-manual-Edges]port link-type access
[HP-C-port-group-manual-Edges]port access vlan 11
On HP A-Series switches, you can also easily set access ports this way:
[HP-C]vlan 11
[HP-C-vlan11]port Gig 1/0/10 to Gig 1/0/12
On HP E-Series switches, you complete the configuration in this way:

HP-E(vlan-11)# untagged 10-12
Also configure P3 on the HP E-Series switch as an untagged member of VLAN
y
11. You will connect PC2 to this port in order to test DHCP:
nl
O
HP-E(config)# vlan 11 untagged 3
What are the show and display commands that display the status of access
Se
ports and what VLANs they’re in with on the different platform?
Cisco:_______________________________________________________________
a lU
_____________________________________________________________________
rn
te
HP A-Series:__________________________________________________________
In
_____________________________________________________________________
P
H
HP E-Series:___________________________________________________________
r
Fo
_____________________________________________________________________
g. Configure the voice ports. Select another range of three ports on HP-C and
E. (If not enough ports are available, you can choose fewer.)
Configure both ports with these settings:
 VLAN 11 (the data VLAN) is untagged.
 VLAN 12 (the voice VLAN) is tagged.
Cisco-A(config)#interface range gigabit 1/0/13-15
Cisco(config-if-range)# switchport mode access
L3.1 –6 Rev. 11.12

Configuring VLANs
Cisco(config-if-range)# switchport access vlan 11

Cisco(config-if-range)# switchport voice vlan 12
On HP A-Series switches, configure the ports using a manual port group. Enter:
[HP-C]port-group manual Phones
[HP-C-port-group-manual-Phones]group-member Gi 1/0/13 to Gi
1/0/15
[HP-C-port-group-manual-Phones]port link-type hybrid
[HP-C-port-group-manual-Phones]port hybrid vlan 11 untagged
[HP-C-port-group-manual-Phones]port hybrid vlan 12 tagged
[HP-C-port-group-manual-Phones]port hybrid pvid vlan 11
[HP-C-port-group-manual-Phones]UNDO port hybrid vlan 1
Note
y
nl
On hybrid A-Series ports (as on trunk ports), when you change the PVID (or
native VLAN), VLAN 1 remains on the ports as an untagged VLAN. For this
O
reason, you must remove VLAN 1 if you do not want it to remain untagged on
the port.
Se
On HP E-Series switches, you create voice ports by giving the ports an untagged
lU
assignment in the data VLAN and a tagged assignment in the voice VLAN.
Enter:
a
HP-E(config)# vlan 11 untagged 13-15

rn
te
HP-E(vlan-12)# voice
In
5. On Cisco-A and Cisco-B, complete these steps:

P
H
a. Enable IP routing.
b. Configure an IP address on interfaces VLAN 11, 12 and 13.
r
Fo
Use this addressing scheme: 10.POD.VLAN.X/24

POD is the number of your group, and VLAN is the VLAN ID. Replace X
depending on the device as follows:
 X=1 on Cisco-A
 X=2 on Cisco-B
c. Configure DHCP relay to direct DHCP requests to 10.POD.1.3.
Cisco-A(config)# ip routing
Cisco-A(config)# interface vlan 11
Cisco-A(config-if)# ip address 10.POD.11.1 255.255.255.0
Cisco-A(config-if)# ip helper-address 10.POD.1.3
Rev. 11.12 L3.1 –7


Cisco-B(config)# ip routing
Cisco-B(config)# interface vlan 11
Cisco-B(config-if)# ip address 10.POD.11.2 255.255.255.0
y
nl
O
Se
Cisco-B(config-if)# ip helper-address 10.POD.1.3
lU
Note
a
In this lab, the HP switches do not need to implement DHCP relay.

rn
For your reference, if you did need to configure DHCP relay, you would do so
with these commands on an HP E-Series switch:
te
HP-E(config)# vlan x ip address 10.POD.X.5/24

In
HP-E(config)# vlan x ip helper 10.POD.1.3

And you would enter these commands on the HP A-Series switch:
P
[HP-C] dhcp enable

H
[HP-C] dhcp relay server-group 1 ip 10.POD.1.3

[HP-C] interface vlan-interface X
r
[HP-C-Vlan-interfaceX] ip address 10.POD.1.3

Fo
[HP-C-Vlan-interfaceX] dhcp select relay

[HP-C-Vlan-interfaceX] dhcp relay server-select 1
6. Configure DHCP on HP-C, which will act as the DHCP server.

Enable the DHCP server on VLANs 1, 11, 12, and 13. Then create pools for the
IP subnets associated with the VLANs. Use these settings for the DHCP pools:
 The network is 10.POD.VLAN.X/24.
 Exclude addresses from 10.POD.VLAN.1 to 10.POD.VLAN.101 as well as
10.POD.VLAN.254. (10.POD.VLAN.254 will be used a virtual IP in a later
lab.)
 Define the default gateway to be 10.POD.VLAN.1.
 Set the lease time to 2 hours.
L3.1 –8 Rev. 11.12
Configuring VLANs
The HP A-Series switch commands are:

[HP-C] dhcp enable
[HP-C] dhcp server ip-pool vlanX-pool
[HP-C-pool-vlanX-pool] network 10.POD.X.0 24
[HP-C-pool-vlanX-pool] gateway-list 10.POD.X.254
[HP-C-pool-vlan1-pool] expired day 0 hour 2
Note
In the commands, replace POD with your POD number and X with the VLAN
number. Repeat the commands for each VLAN.
You can configure other settings, but these are not required for the lab.
[HP-C-pool-vlanX-pool] dns-list 10.POD.1.100
y
[HP-C-pool-vlanX-pool] domain-name example0X.hp.com
nl
[HP-C-pool-vlanX-pool] expired day 0 hour 2
O
[HP-C-pool-vlanX-pool] quit
Se
[HP-C] dhcp server forbidden-ip 10.POD.X.1 10.POD.X.101
[HP-C] dhcp server forbidden-ip 10.POD.X.254
lU
7. To verify that DHCP is working, connect PC2 to P3 HP-E. Configure PC2 to
obtain its IP address using DHCP.
a
rn
8. Verify that PC2 receives an IP address in the subnet for VLAN 11

(10.POD.11.0/24).
te
9. Save the configuration of your devices for later use and define the saved
In
configuration as the startup-config.

P
On Cisco switches:
H

r
Fo
Cisco-A# dir flash:

Cisco-A(config)#boot config flash:interop-3a.cfg
Cisco-A# show boot
On HP A-Series switches:
<HP-C> dir /all
Rev. 11.12 L3.1 –9

HP-E# write mem
The config file name should be interop2a. Rename the file to interop3a.
HP-E# copy config interop2a config interop3a
To make this configuration the startup-config, enter this command:

10. The next steps are for an optional task, in which you activate GVRP on HP-C and
E.
a. First enable GVRP globally on HP-C and HP-E.
b. Second, enable GVRP on uplinks. You must enable GVRP on HP A-Series
y
ports, which must be trunk ports. On HP E-Series, GVRP is enabled on all
nl
ports by default when you enable the feature globally.
O
On the HP A-Series switch, enter:
Se
[HP-C] gvrp
[HP-C] int gi 1/0/1
lU
[HP-C-GigabitEthernet1/0/1] gvrp
[HP-C-GigabitEthernet1/0/1] gvrp registration ?
a
rn
fixed Fixed type

forbidden Forbidden type
te
normal Normal type

In
[HP-C-GigabitEthernet1/0/1]gvrp registration normal

P
Note
H
By default, GVRP registers all VLANs on the interfaces on which it is enabled.

r
On HP E-Series switches, after you have enabled GVRP globally, the switch can
Fo
automatically learn VLANs on all ports. Enter these commands:

HP-E(config)# gvrp
HP-E(config)# show gvrp
11. Verify and explore the GVRP configuration.

a. Create VLAN 100 on HP-C.
Do you see the new VLAN on HP-E?
______________________________________________________________
What ports belong to VLAN 100 on HP-C and E?
______________________________________________________________
L3.1 –10 Rev. 11.12

Configuring VLANs

[HP-C] display vlan
[HP-C] display vlan all
[HP-C] display gvrp state int gi 1/0/1 vlan 100

HP-E# show vlan
HP-E# show vlan 100
HP-E# show vlan port 1 detail
b. Create VLAN 101 on HP-E.

Do you see the new VLAN on port 1 of HP-E?
_________________________________________________________________
y
Do you see the new VLAN 101 on HP-C?
nl
O
_________________________________________________________________
Create VLAN 101 on HP-C as well. Now does port 1 on HP-E belong to
Se
VLAN 101?
_________________________________________________________________
a lU
12. Delete VLAN 100 on HP-C. Is it removed on HP-E as well?
rn
_____________________________________________________________________
te
13. Delete VLAN 101 on HP-E. Is it removed on HP-C as well? If not, delete it on
In
HP-C.
_________________________________________________________________
P
H
14. Disable GVRP globally on HP-C and HP-E.

15. You should have saved the configuration in step 7. Do not save the configuration
r
Fo
now; you will load the previously saved configuration for the next lab.
Rev. 11.12 L3.1 –11

Command reference
HP E-Series Commands
members of VLANs.
of VLANs.
Assign an IP address to a VLAN vlan <ID> ip address <IP address subnet mask | IP
interface. address/prefix length]
Configure DHCP relay on a VLAN vlan <ID> ip helper-address <DHCP server IP address>
interface.
Enable or disable GVRP. [no] gvrp
Enable GVRP learning mode on an interface <port-list> gvrp learn
interface (default).
y
Create a VLAN that is automatically vlan <ID> [auto <port-list>]
nl
advertised on the specified ports
when GVRP is enabled (default
O
setting).
Se
Set the configuration file for the startup-default config <filename>
startup-config.
lU
a

rn
te
In
Create a VLAN interface interface vlan-interface <ID>

P

H
VLAN.
r
Fo
Configure a port as an access port in interface <type> <number>

a VLAN. port-link-type access
port access vlan <VLAN ID>
Assign an IP address to a VLAN interface vlan-interface <ID>
interface. ip address <IP address> <subnet mask | prefix length>
Create a default route. ip route-static 0.0.0.0 0 <default gateway address>
Enable DHCP services. dhcp enable
Exclude IP addresses from being dhcp server forbidden-ip <first IP address> [last IP
assigned. address]
L3.1 –12 Rev. 11.12

Configuring VLANs
Create a DHCP pool. dhcp server ip-pool <ID>
Set the network. network <network address> mask <mask>
Set the default gateway. gateway-list <IP address>
Configure a DHCP server group for dhcp relay server-group <ID> ip <DHCP server IP
DHCP relay. address>
Enable DHCP relay on a VLAN interface vlan-interface <ID>
interface and specify the server group dhcp select relay
dhcp relay server-select <ID>
Enable or disable GVRP. [undo] gvrp
Enable GVRP on a physical port. interface <type> <number>

gvrp
y
nl
O
startup-config.
Se

lU
named file.
a
config.
rn
te
Cisco Commands
In
Create a VLAN interface vlan <VLAN_ID>

Configure trunk ports. interface range <port_ID_list>
P
switchport trunk encapsulation dot1q

H
switchport mode trunk

Configure access ports. interface range <port_ID_list>
r
switchport mode access

Fo
switchport access <VLAN_ID>

Configure voice ports. interface range <port_ID_list>
Configure an IP address on a VLAN. interface vlan <VLAN_ID>
ip address <IP address> <subnet mask>
Configure DHCP relay (a helper interface vlan <VLAN_ID>
address) on a VLAN. ip helper-address <DHCP server IP address>
Enable IP routing. ip routing
Rev. 11.12 L3.1 –13


configuration file.
startup.
Reboot. reload
y
nl
O
Se
a lU
rn
te
In
P
r H
Fo
L3.1 –14 Rev. 11.12

Implementing MSTP
on Cisco and HP Switches
Module 4 Lab 1
Objectives
 Configure Multiple Spanning Tree Protocol (MSTP) on Cisco-And HP switches
 Test the MSTP operations on Cisco-And HP switches
 Verify that switches in different regions can interoperate through Rapid Spanning
y
Tree Protocol (RSTP)
nl
Understand the implications of MSTP not being VLAN-aware
O

Lab equipment
Root
Se
Root
MSTP Region
lU
for Instances 0 and 1 for Instance 2
Name: HP-Cisco
P1 P1
Revision: 1
Cisco-A Cisco-B
MST Instance 1: VLAN 12
a
P3 P4 P3 P4
MST Instance 2: VLAN 1,11,13
rn
te
MSTP IP addressing:
10.POD.VLAN.X/24
In
X=1 on Cisco-A
X=2 on Cisco-B
P
P1 P2 P1 P2 X=3 on HP-C
HP-C HP-E X=4 on HP-D
H
X=5 on HP-E
P3 P3 X=6 on HP-F
r
X=100 on Server_1
Fo
X=101 on Client_1
Server_1 Client_1
Figure 4-1: Configuring MSTP
When this lab activity is completed, your network’s topology should resemble the
configuration shown in Figure 4-1.
You will need the following equipment to complete this lab:
 Devices:
 Two Cisco 3750 switches in the aggregation layer (Cisco-A and Cisco-B)
 One HP A5800 switch (HP-C) and one HP-E3500 switch (HP-E) in the
access layer
 Two laptops
Rev. 11.12 L4.1 – 1

 Cabling (as shown in Figure 4-1):

 One Gigabit link between the two Cisco switches
 One link between each HP access layer switch and each of the two Cisco
switches (four links total)
 One connection in VLAN 1 between Serv and HP-C
 One connection in VLAN 1 between Client_1 and HP-E
Important
! Do not make these connections now. The lab will tell you when to establish them.
Lab steps
y
Complete the following tasks.
nl
1. On Cisco-A, Cisco-B, HP-C, HP-F, load the interop3a configuration that you
O
saved at the end of Lab 3.1. This configuration contains the switch’s
management, VLAN, IP, and port configurations.
2.
Se
Verify that the interop3a configuration file is the startup configuration.
lU
3. If it is not, make it the startup configuration and reboot.
On Cisco switches:
a
rn
Cisco-A# show boot

te

Cisco-A# reload
In
P

H

r
<HP-C> reboot
Fo
HP-E# reload
4. After you have loaded the configuration on each switch, quickly verify the
following on each switch:
 VLAN 1 has the correct IP address (see Figure 4-1).
 VLANs 1, 11, 12, and 13 are configured.
L4.1 – 2 Rev. 11.12

Implementing MSTP on Cisco and HP Switches
 Uplinks are set as trunk ports, which permit all VLANs. On the HP E-Series
device, the uplinks are untagged for VLAN 1 and tagged for all other
VLANs.
 LLDP is enabled.
5. As you complete the lab, take note of the show and display commands you use
to verify and troubleshoot your configuration. Specifically, note which commands
allow you to answer questions such as:
 What is MSTP region configuration?
 Which switch is root in an MSTP instance and in the Common Spanning-
Tree (CST)?
 What port is root port on a switch? And what is cost to the root (root path
cost)?
y
nl
 Which ports are designated (forwarding), and which ports are alternate
O
(blocked)?
Se
_____________________________________________________________________
lU
_____________________________________________________________________
a
rn
te
_____________________________________________________________________
In
_____________________________________________________________________
P
H
_____________________________________________________________________
r
Fo
_____________________________________________________________________
Activate MSTP
6. Check the software version on the Cisco switches. Based on information given in
the lecture, will they support MSTP?
_____________________________________________________________________
Rev. 11.12 L4.1 – 3

7. Enable spanning tree in MSTP mode on all switches. Do not set priorities, neither
MSTP region parameters.
Cisco(config)# spanning-tree mode mst
On HP A-Series switches, STP is not enabled but MSTP is the default STP mode.
You simply need to enable STP:
[HP-C] stp enable
On HP E-Series switches, STP is not enabled but MSTP is the default STP mode.
You simply need to enable STP:
HP-F(config)# spanning-tree
8. Establish all of the connections between the switches and with Server_1 and
Client_1 as displayed in Figure 4-1.
y
nl
9. When you enable MSTP without configuring other settings, each switch is its
O
own region, and the switches interact in RSTP using their setup in the IST
instance.
Se
a. Which switch is root of the common and internal spanning tree (CIST)?
lU
_________________________________________________________________
b. Why is this switch root?
a
_________________________________________________________________
rn
c. Which commands do you enter on each switch to verify the switch’s role
te
and the role of its ports (root port, alternate port, and designated port)?
In
Cisco-A: _________________________________________________________
P
H
_________________________________________________________________
r
Fo
HP-C: ___________________________________________________________
_________________________________________________________________
HP-E:______________________ ______________________________________
_________________________________________________________________
d. Which commands tell you the current MSTP region configuration?

Cisco-A: _________________________________________________________
_________________________________________________________________
L4.1 – 4 Rev. 11.12

HP-C: ___________________________________________________________
_________________________________________________________________
HP-E:______________________ ______________________________________
_________________________________________________________________
e. Discover the following information on each switch platform:

 Default name of the MSTP region in this configuration
 Default revision number
y
 Default Instance name and VLAN mappings
nl
Cisco-A:
O
Region name: ____________________________________________________
Se
Revision #: ______________________________________________________
lU
Instance and VLAN mapping: ______________________________________
a
rn
HP-C:
te
Region name: ____________________________________________________

In
P
Revision #: ______________________________________________________
r H

Fo
HP-E:
Region name: ____________________________________________________
Revision #: ______________________________________________________
f. Verify the port cost on each switch of Gigabit Interface. The default setting
is 20 000. Is it consistent between platforms?
Rev. 11.12 L4.1 – 5

Write down the cost of Gigabit port on each switch:

Cisco-A Gigabit port cost: _________________________________________
HP-C Gigabit port cost: ___________________________________________
HP-E Gigabit port cost: ____________________________________________
10. On HP-C, enter the command to set standard MSTP port costs:
[HP-C]stp pathcost-standard dot1t
Verify that the cost value has changed. The standard cost for a Gigabit port
is 20000.
y
11. Configure uplink ports as non-edge ports. Other ports should be edge ports.
nl
On Cisco switches, you can configure all ports to be edge ports by default; if
O
they receive BPDU, they transit to non-edge ports. You can also set the roles
manually:
Se
Cisco(config-if)#spanning-tree portfast default
lU
Cisco(config)#interface gig 1/0/1
Cisco (config-if)#no span portfast
a
Cisco #show span mst

rn
On HP A-Series switches, ports automatically change from edge to non-edge

te
when they receives BPDU. You can also force the non-edge role on uplinks.
In
[HP-C]interface GigabitEthernet1/0/1
[HP-C-GigabitEthernet1/0/1]undo stp edged-port
P
[HP-C]display stp
H
On HP E-Series switches, ports automatically change from edge to non-Edge

r
when they receive BPDU. You can also force the non-edge role on uplinks.
Fo
HP-E(config)# no span 1-2 auto-edge-port

HP-E(config)# no span 1-2 admin-edge-port
HP-E(config)# show span 1-2 config
HP-E(config)# show span 1-2
L4.1 – 6 Rev. 11.12

Configure the MSTP region

12. Configure the MSTP region on each switch. Use the settings indicated in the
table.
MSTP Settings
Parameter Setting
Name HP-Cisco
Revision 1
MST Instance 1 VLAN 12
MST Instance 2 VLANs 1, 11, and 13
Important
! The region name is case-sensitive
y
nl
On Cisco switches:
O
Cisco-A(config)# spanning-tree mst configuration
Se
Cisco-A(config-mst)# name HP-Cisco
Cisco-A(config-mst)# revision 1
lU
Cisco-A(config-mst)# instance 1 vlan 12
Cisco-A(config-mst)# instance 2 vlan 1,11,13
a
rn
Cisco-A(config-mst)# exit
te
Note
On Cisco, the MSTP Configuration is not validated until you enter the exit
In
command. Beware of this common mistake.

P
Cisco-A# show span mst-config

H
Cisco-A# show span mst 0-2

r

Fo
[HP-C]stp region-configuration
[HP-C-mst-region] region-name HP-Cisco
[HP-C-mst-region] revision-level 1
[HP-C-mst-region] instance 1 vlan 12
[HP-C-mst-region] instance 2 vlan 1 11 13
[HP-C-mst-region] active region-configuration
[HP-C-mst-region] display stp region-config
[HP-C-mst-region] display stp brief
Rev. 11.12 L4.1 – 7


HP-E(config)# spanning-tree config-name HP-Cisco
HP-E(config)# spanning-tree config-revision 1
HP-E(config)# spanning-tree instance 1 vlan 12
HP-E(config)# spanning-tree instance 2 vlan 1 11 13
HP-E(config)# show spanning-tree mst-config
13. Define the roots and secondary roots for each instance as indicated in the table.
Root and Secondary Root settings
Instance Root Secondary Root
0 Cisco-A Cisco-B
1 Cisco-A Cisco-B
2 Cisco-B Cisco-A
y
nl
On Cisco-A, enter:
O
Cisco-A(config)# spanning-tree mst 0 priority 0
Se
lU
OR
a
Cisco-A(config)#spanning-tree mst 0 root primary
rn
Cisco-A(config)#spanning-tree mst 1 root primary

te
Cisco-A(config)#spanning-tree mst 2 root secondary
On Cisco-B, enter:
In
Cisco-B(config)# spanning-tree mst 0 priority 4096

P

H
OR
r
Fo
Cisco-B(config)#spanning-tree mst 0 root secondary

Cisco-B(config)#spanning-tree mst 1 root secondary
Cisco-B(config)#spanning-tree mst 2 root primary
14. Check MSTP operations on the HP-C or HP-E access layer switches.
On HP-C, enter:
[HP-C]display stp instance 0
L4.1 – 8 Rev. 11.12

On HP-E, enter
HP-E#show span 1-2 instance IST
HP-E#show span 1-2 instance 1
Which switch is root in instance 0? ___________________________________
What is each switch’s root priority and MAC address in instance 0?
__________________________________________________________________
y
nl
O
__________________________________________________________________
Se
lU
a
rn
__________________________________________________________________
te
In
15. On the HP Edge switches, in each instance, determine which port is plays each
role:
P
 Root port
H
 Alternate port
r
Fo
On HP-C, enter:
[HP-C]display stp brief
On HP-E, enter:
HP-E#show span 1-2 instance IST
HP-C root port: ____________________________________________________
HP-C alternate root port: ____________________________________________
Rev. 11.12 L4.1 – 9

HP-E root port: ____________________________________________________
HP-E alternate root port: ____________________________________________
Explore MSTP operations

16. Make sure that:
 Server_1 is connected on P3 of HP-C
 P3 is access port in VLAN1
 Client_1 is connected on port P3 of HP-F
 P3 is untagged port in VLAN1
y
17. Verify that Server_1 can ping Client_1. If not check and modify their IP
nl
addresses:
O
 Server_1: 10.POD.1.100
Se
 Client_1: 10.POD.1.101
18. On Server_1, start a continuous fping in VLAN 1 to Server_1 with a 50 ms
lU
timeout.
a
Fping 10.POD.1.100 –c -t 50 –w 50
rn
19. On HP-C, change the MSTP revision name from HP-Cisco to Fakename.
te
20. On Server_1, check the fping. How long did it take for failover to occur when
HP-C left the MSTP region
In
21. Check the MSTP operations and instances on HP-C.

P
Which switch does HP-C list as the root in the CIST?

r H
_______________________________________________________________
Fo
Which switch does it list as the root of the MSTP instance 1 and 2?
_______________________________________________________________
22. Change the region name on HP-C back to the correct name (HP-Cisco).
23. Check the fping. How long does it take for failover to occur?
_______________________________________________________________
L4.1 – 10 Rev. 11.12

Important
! When you configure MSTP in a network, you might experience failovers of this
magnitude. Depending on your environment, this may or may not be acceptable.
You would need to plan accordingly.
24. On HP-C, remove VLAN 12.

a. Does the instance 1 topology change?
_________________________________________________________________
b. Does failover occur?
_________________________________________________________________
y
nl
c. Recreate VLAN 12.
O
25. On HP-F, disconnect the root port.
Se
a. Does a failover occur?
lU
_________________________________________________________________
a
rn
b. Reconnect the port.

te
c. Does a failover occur?

In
_________________________________________________________________
P
H
r

Fo
On Cisco switches:
Cisco-A# dir flash:
Cisco-A# show boot
Rev. 11.12 L4.1 – 11

<HP-C> dir /all

HP-E# write mem
y
nl
O
Se
a lU
rn
te
In
P
r H
Fo
L4.1 – 12 Rev. 11.12

Command reference
Configure ports as untagged members of vlan <ID> untagged <port ID list>
VLANs.
Configure ports as tagged members of vlan <ID> tagged <port ID list>
VLANs.
Assign an IP address to a VLAN interface. vlan <ID> ip address <IP address subnet mask | IP
address/prefix length]
Enable MSTP globally. spanning-tree
Define the MSTP config name. spanning-tree config-name <ASCII string>
Define the MSTP revision. spanning-tree config-revision <revision number>
Assign VLANs to an MSTP instance. spanning-tree instance <ID> vlan <VLAN ID list>
Configure the switch’s priority for an MSTP spanning-tree instance <ID> priority <0-15>
y
instance.
nl
Configure a port as an administratively spanning-tree <port ID list> admin-edge-port
assigned edge port or remove the setting.
O
Configure a port as an automatically spanning-tree <port ID list> admin-edge-port
assigned edge port or remove the setting.
Se
Configure how the port determines its type spanning-tree <port ID list> point-to-point-mac [true | false
(point-to-point or not). | auto]
lU
View the global STP (or MSTP) status. show spanning-tree
View the spanning-tree status for ports. show spanning-tree <port ID list>
View information about the MSTP instance. show spanning-tree instance <ist | instance ID> [detail]
a
View the MSTP configuration. show spanning-tree config

rn
View the MSTP configuration for an show spanning-tree config <ist | instance ID>
te
instance.
View the MSTP configuration for specific show spanning-tree <port ID list> config [ist | instance ID]
In
ports.
P
Set the configuration file for the startup- startup-default config <filename>
config.
H

r
Fo
Enable STP globally. stp enable
Enter the MSTP region configuration view. stp region configuration
Define the MSTP config name. region-name <ASCII string>
Define the MSTP revision. revision-level <revision number>
Assign VLANs to an MSTP instance <ID> vlan <VLAN ID list>

instance.
Rev. 11.12 L4.1 – 13

Activate the region. active region-configuration
Configure the path cost as 802.1t-compliant stp pathcost-standard dot1t
Configure a port as an edge port or non- interface <type> <number>

edge port. [no] stp edged-port enable
Configure how the port determines its type interface <type> <number>
(point-to-point or not). stp point-to-point [auto | force-false | force-true]
View the MSTP status and statistics. display stp
View the MSTP status and statistics for an display stp instance <instance ID>
instance.
View the MSTP status and statistics for ports. display stp [instance <instance ID>] interface <interface
list>
View the MSTP region configuration. display stp region-configuration
y
View the MSTP root. display stp root
nl
O
Se
Set the configuration file for the startup- startup saved-configuration <filename>
config.
lU
a
Save the running configuration as a named save <filename>
file.
rn
View the current file for the startup-config. display startup

te
In
Cisco Commands
P

H
Configure the STP mode to MSTP. spanning-tree mode mst

r
Configure PortFast as the default setting for spanning-tree portfast default

Fo
ports.
Disable PortFast on an uplink port (make it a interface <type> <number>
non-edge port). no spanning-tree portfast
Enter the MSTP region configuration view. spanning-tree mst configuration
Define the MSTP config name. name <name>
Define the MSTP revision. revision <number>
Assign VLANs to an MSTP instance <ID> vlan <VLAN ID list>
instance.
Validate and apply the settings. exit
Configure the switch’s priority for an MSTP spanning-tree mst <instance ID> priority <priority>
instance.
Configure the switch as the root or spanning-tree mst <instance ID> root [primary |
secondary root for an MSTP instance. secondary]
View information about MSTP. show spanning-tree mst
L4.1 – 14 Rev. 11.12

View the MSTP region configuration. show spanning-tree mst configuration
View an MSTP instance. show spanning-tree mst <instance ID>

configuration file.
Specify the saved configuration file for the boot config flash:<filename>
configuration that loads on startup.
y
nl
O
Se
a lU
rn
te
In
P
r H
Fo
Rev. 11.12 L4.1 – 15

y
nl
O
Se
lU
a
rn
te
In
P
r H
Fo
L4.1 – 16 Rev. 11.12

Configuring PVST+/MSTP Interoperability:
Cisco at the Aggregation Layer
Module 5 Lab 1
Objectives
 Configure interoperation in an environment in which HP switches implement
MSTP at the edge and Cisco switches implement PVST+ at the aggregation layer
(or core)
y
 Test interoperability between MSTP on HP-Edge switches and PVST+ on Cisco-
nl
Aggregation switches
O
 Verify that switches interoperate in VLAN 1 using standard STP and RSTP
Lab equipment
Se
lU
Root Root
For VLANs 1,11,13 for VLANs 12
Rapid-PVST+
P1 P1
a
Cisco-A Cisco-B
P4 P3
rn
P3 P4
te
In
MSTP Region
P
P1 P2 Name: HP-Cisco
P2 P1 Revision: 1
H
HP-C HP-E
MSTP MST Instance 1: VLAN 12
P3 P3 MST Instance 2: VLAN 1,11,13
r
Fo
Server_1 Client_1
Figure 5.1-1: Configuring PVST+/MSTP interoperability: Cisco at the aggregation layer
When this lab activity is complete, your network’s topology should resemble the
diagram above.
 Devices:
 Two Cisco 3750 switches at the aggregation layer (Cisco-A and Cisco-B)
 One HP A5800 (HP-C) and one HP-E3500 (HP-E) in the access layer
 Two laptops
Rev. 11.12 L5.1 –1

 Cabling:
 One Gigabit link between the two Cisco switches
 One Gigabit link between HP access layer switch and each Cisco switch
(four links total)
 One connection in VLAN 1 between Server_1 and HP-C
Lab steps
Complete these tasks.
Complete initial setup
y
1. Establish the connections as shown in Figure 5.1-1.
nl
2. Reset the switches to the interop5a configuration. This configuration includes all
O
the necessary management, VLAN, IP, and port configuration—as well as the
MSTP setup, in which Cisco-A and Cisco-B are root and secondary root in MSTP
Se
instances 0, 1, and 2.
lU
a. Verify that the interop5a config is the startup-config.
b. If it is not, make it the startup-config and reboot the switches.
a

rn
Cisco-A# show boot

te

In
Cisco-A# reload
P

H

r

Fo
<HP-C> reboot

HP-E# reload
L5.1 –2 Rev. 11.12

Configuring PVST+/MSTP Interoperability: Cisco at the Aggregation Layer
Configure PVST+ on Cisco and MSTP on HP

3. HP-C and HP-E switches already implementing MSTP. You configured this feature
in the previous lab.
MSTP Settings
Parameter Setting
Name HP-Cisco
Revision 1
4. Verify HP switches are using their default priorities:

 HP A-Series (HP-C) = 32768
y
 HP-E-Series (HP-E) = 8 (x4096)=32768
nl
O
5. Before enabling Rapid-PVST+ on Cisco switches, start an fping from Client_1 to
Server_1 with a 100 ms timeout, to measure impact on changing mode on your
Se
network.
C:>fping 10.POD.1.100 –c -t 100 –w 100
lU
6. Enable Rapid-PVST+ mode on Cisco-A and B.
a
On Cisco-A, enable Rapid PVST+:

rn
Cisco-A(config)#spanning-tree mode rapid-pvst

te
On Cisco-B, enable Rapid PVST+:

In
Cisco-B(config)#spanning-tree mode rapid-pvst
7. Configure these settings:

P
 Cisco-A: Root in VLAN 1,11,13

H
 Cisco-B: Root in VLAN 12

r
Fo
You can enter the priorities manually as follows:

a. Define Cisco-A as root for VLANs 1, 11 and 13 and secondary root for
VLAN 12:
Cisco-A(config)#spanning-tree vlan 1,11,13 priority 0
Cisco-A(config)#spanning-tree vlan 12 priority 4096
b. Define Cisco-B as root for VLANs 12 and secondary root for VLAN 1, 11,
and 13:
Cisco-B(config)#spanning-tree vlan 12 priority 0
Cisco-B(config)#spanning-tree vlan 1,11,13 priority 4096
Cisco-A(config)#spanning-tree vlan 1,11,13 root primary
Cisco-A(config)#spanning-tree vlan 12 root secondary
Rev. 11.12 L5.1 –3

Alternatively, you can configure the switches as the primary and secondary
roots, which configures the proper priorities for the role automatically. Enter
these commands on Cisco A:
Cisco-A(config)#spanning-tree vlan 1,11,13 root primary
Cisco-A(config)#spanning-tree vlan 12 root secondary
Enter these commands on Cisco B:

Cisco-B(config)#spanning-tree vlan 12 root primary
Cisco-B(config)#spanning-tree vlan 1,11,13 root secondary
If you use the root options, verify the priority that the Cisco IOS has assigned to
the root and secondary root switches.
8. Verify the configuration with this command (replace X with each VLAN ID):
y
Cisco# show span vlan X
nl
For each VLAN on each Cisco switch, please note the switch’s role, priority, and
O
MAC address.
Cisco Rapid PVST+ Settings
Se
Cisco-A Priority Root? Cisco-B Priority Root?
lU
VLAN 1 VLAN 1
VLAN 11 VLAN 11
a
rn
VLAN 12 VLAN 12
VLAN 13 VLAN 13
te
MAC
In
MAC
address address
P
H
9. On HP-C and HP-E, find which switch is root of the common spanning tree (CST).
r
Also find each switch’s root port and root path cost in the CST.
Fo

<HP-C> display stp

HP-E# show spanning-tree
Record the information:

 Bridge ID and name of the root switch in the CST?
_________________________________________________________________
 Root port in the CST on HP-C: _____________________________

 Root port in the CST on HP-E: _____________________________
L5.1 –4 Rev. 11.12

10. Enter these commands to find information about MSTP instances 1 and 2.
<HP-C> display stp instance 1
<HP-C> display stp instance 2

HP-E# show spanning-tree instance 1
HP-E# show spanning-tree instance 2
 Which switch is root in the instance 1? Why?
_____________________________________________________________________
y
_____________________________________________________________________
nl
O
_____________________________________________________________________

Se
Which switch is root in the instance 2? Why?
lU
_____________________________________________________________________
a
rn
_____________________________________________________________________
te
In
_____________________________________________________________________
P
H
Note
You must understand MSTP’s IST master.
r
Fo
If an MST bridge is the root bridge for the CST, then it is the IST master of that
MST region. If the CST root is outside the MST region, as in this lab, in which
the CST root is Cisco-A, one of the MST bridges at the boundary is selected as
the IST master. In this lab, the IST master for each region is the only HP switch in
that region. Other bridges on the boundary that belong to the same region
eventually block the boundary ports that lead to the root. However, this does not
occur in this lab because each HP switch communicates BPDUs through the
Cisco switch.
11. On the Cisco switches, find the following information:

Which switch is root in the following VLANs:
 VLAN 1? ______________________________________________________
 VLAN 11? ______________________________________________________
Rev. 11.12 L5.1 –5

 VLAN 12? _____________________________________________________
 VLAN 13? _____________________________________________________
What are the port costs on Cisco switches?

__________________________________________________________________
12. On Cisco-A and Cisco-B, change the path cost method to long:
Cisco-A(config)#spanning-tree pathcost method long
 What are the port costs now on the Cisco switches?
__________________________________________________________________
y
nl
 Has this changed the status of the ports on the HP switches and their root
O
path cost?
Se
__________________________________________________________________
lU
__________________________________________________________________
a
Verify the -spanning tree operations

rn
te
13. Server_1 and Client_1 are connected to port P3 of HP-C and HP-E. Both are in
VLAN 1.
In
14. Start a continuous fping between Client_1 and Server_1 (if you have not yet
P
started it).
H
C:>fping 10.POD.1.100 –c -t 100 –w 100

r
15. Disable the root port on HP-C or HP-E. Determine how long failover takes. Then
Fo
re-enable the port.

On HP-C, you would enter:
[HP-C]interface GigabitEthernet 1/0/1
[HP-C-GigabitEthernet1/0/1]shutdown
[HP-C-GigabitEthernet1/0/1]undo shutdown
On HP-E, you would enter:

HP-E(config)# interface 1 disable
HP-E(config)# interface 1 enable
Note
In these and all later commands, remember to specify the interface IDs that you
recorded in your Port Mapping table.
L5.1 –6 Rev. 11.12

How long does it take for failover to occur?
__________________________________________________________________
__________________________________________________________________
__________________________________________________________________
16. Close all uplink ports (P1, P2 , and P3) on Cisco-A.

__________________________________________________________________
y
nl
__________________________________________________________________
O
Se
__________________________________________________________________
lU
17. Open all uplink ports (P1, P2 , and P3) on Cisco-A.
a

rn
te
__________________________________________________________________
In
__________________________________________________________________
P
H
__________________________________________________________________
r
Fo
Note
If you have trouble, try these troubleshooting tips. If the fping times out and never
completes successfully again when you close a port, verify the VLAN setup on
the uplinks. Are they configured as trunks? Are all VLANs permitted? Remember:
by default, the VLANs are not permitted on HP A-Series trunks.
Rev. 11.12 L5.1 –7

Configure PVST+
18. On both Cisco switches, change the mode to PVST+.
Cisco-A(config)#spanning-tree mode pvst
19. On both HP switches, check port roles. Did they change?

__________________________________________________________________
__________________________________________________________________
re-enable the port.
y
nl
O
Se
lU
a
How long are the failovers now? Are they (very) different? Why?
rn
te
__________________________________________________________________
In
__________________________________________________________________
P
H
__________________________________________________________________
r
Fo
__________________________________________________________________
__________________________________________________________________
__________________________________________________________________
21. On both Cisco switches, change the mode back to Rapid-PVST+.

Cisco-A(config)#spanning-tree mode rapid-pvst
L5.1 –8 Rev. 11.12

Implement load balancing between VLANs (optional)

This part of lab is optional but recommended.
In the module, you learned about how to adjust a configuration to implement load
balancing by sending traffic over various uplinks depending on the VLAN. You will
now implement load balancing by adjusting the cost on switches’ ports.
22. On both Cisco switches, change the port cost of uplink P1 (the port between the
two Cisco switches) as follows:
 30000 in VLAN 1
 10000 in VLANs 11-13
Cisco(config-if)#spanning-tree vlan 1 cost 30000
y
nl
Cisco(config-if)#spanning-tree vlan 11-13 cost 10000
O
Note
As usual, enter the correct interface ID according to your Port Mapping table.
Se
23. Verify that the Cisco switches are correctly blocking ports. Each switch should
lU
block the port for the VLAN in which it is secondary root:
Cisco# show spanning-tree vlan 1
a
rn

te
Which switch blocks the ports in the following VLANs:

In
 In VLAN 1: _______________________________________________________
P
H
 In VLAN 11: ______________________________________________________

r
Fo
 In VLAN 12: ______________________________________________________
 In VLAN 13: ______________________________________________________
24. Start a continuous fping between Client_1 and Server_1 (if not yet started).
C:>fping 10.POD.1.100 –c -t 100 –w 100
re-enable the port.
Rev. 11.12 L5.1 –9

How long are the failovers?
__________________________________________________________________
__________________________________________________________________
__________________________________________________________________
y
__________________________________________________________________
nl
O
__________________________________________________________________
Se
__________________________________________________________________
lU
26. Close all uplink ports (P1, P2 , and P3) on Cisco-A.
a
rn
Enter these commands:

te
Cisco-A(config)# interface range gigabit 1/0/1 to 3

Cisco-A(config-if)# shutdown
In

P
__________________________________________________________________
r H
Fo
__________________________________________________________________
__________________________________________________________________
27. Open all uplink ports (P1, P2 , and P3) on Cisco-A.

Enter these commands:
Cisco(config)# interface range gigabit 1/0/1 to 3
Cisco(config-if)# no shutdown
L5.1 –10 Rev. 11.12

__________________________________________________________________
__________________________________________________________________
__________________________________________________________________
Save your configuration

28. You have completed the lab. Save the MSTP configuration as interop5a for later
use and define this configuration as the startup-config.
y
On Cisco switches:
nl
O
Se
Cisco-A# dir flash:
lU
Cisco-A# show boot
a
rn

te
<HP-C> dir /all

In

P

H

r
Fo
HP-E# write mem


Rev. 11.12 L5.1 –11

Command reference
View the MSTP configuration for an show spanning-tree config <ist | instance ID>
instance.
ports.
Disable spanning-tree on a switch port. Spanning-tree bpdu-filter <port ID list>
Disable switch ports. interface <port ID list> disable
y
nl
config.
O
Se
configuration file. filename> lU
a

rn
View the MSTP status of active ports. display stp brief

te
instance.
In
View the MSTP status and statistics for a list display stp [instance <instance ID>] interface <interface
of ports. list>
P

H

r
Fo
Disable STP on a switch port. interface <type> <number>

stp disable
Enable a switch port. interface <type> <number>
no shutdown
Disable a switch port. interface <type> <number>
shutdown
config.
L5.1 –12 Rev. 11.12



file.
Cisco Commands
Configure the STP mode to Rapid PVST+. spanning-tree mode rapid-pvst
Set the STP path cozsst calculation method. spanning-tree pathcost method [long | short]
y
Set the switch’s PVST+ priority for a VLAN. spanning-tree vlan <VLAN ID list> priority <priority>
nl
O
Configure the switch as root or secondary spanning-tree vlan <VLAN ID list> root [primary |
root for PVST+ in a VLAN. secondary]
Se
View the PVST+ configuration for a VLAN. show spanning-tree VLAN <VLAN ID>
lU
Configure the spanning tree path cost for a interface <type> <number>
port. spanning-tree vlan <ID> cost <cost>
a
no shutdown
rn

shutdown
te

In

P
H

r

Fo
configuration file.
Rev. 11.12 L5.1 –13

y
nl
O
Se
lU
a
rn
te
In
P
r H
Fo
L5.1 –14 Rev. 11.12

Configuring PVST+/MSTP Interoperability:
HP at the Aggregation Layer
Module 5 Optional Lab 2
Objectives
Note that this lab is optional because you might encounter this situation (Cisco at the
edge and HP at the distribution layer) more rarely than the opposite. In addition,
when you have HP A-Series switches in the distribution layer, it is strongly
recommended that you use IRF (which makes spanning tree unnecessary).
y
nl
 Configure interoperation in an environment in which Cisco switches implement
PVST+ at the edge and HP switches implement MSTP at the aggregation layer
O
(or core)
Se
 Test interoperability between PVST+ on Cisco edge switches and MSTP on HP
aggregation switches
lU
 Verify that switches can use STP and RSTP to interoperate on VLAN 1
a
Lab equipment
rn
te
Root root
MSTP MSTP Region
In
P1 P1
HP-C HP-D Name: HP-Cisco
P2 Revision: 1
P
P2 P3
P3 MST Instance 1: VLAN 12
H

r
Fo
P1 P2 P1 P2
Cisco-A Rapid-PVST+ Cisco-B
P3 P3
Figure-5.2-1: Configuring PVST+/MSTP interoperability: HP at the aggregation layer
diagram above.
Rev. 11.12 L5.2 –1


 Devices:
 Two HP A5800 switches at the aggregation layer (HP-C and HP-D)
 Two Cisco 3750 switches at the access layer
 Two laptops
 Cabling:
 One link aggregation between the two HP switches
 One link between each Cisco access layer switch and each HP switch
(four links total)
 One connection in VLAN 12 between laptop 1 and Cisco-A
y
 One connection in VLAN 12 between laptop 2 and Cisco-B
nl
Lab steps
O
Se
Complete the tasks in each section.
Complete the initial setup

lU
1. Establish the connections as shown in Figure 5.1-1.
a
2. Load the interop5a configuration on the switches. This configuration includes all
rn
the necessary management, VLAN, IP, and port configuration—as well as the
te
MSTP setup on the switches.

In

P

H
Cisco# show boot

r
Fo
Cisco(config)#boot config flash:interop-5a.cfg

Cisco# reload

<HP-C> reboot

HP-E# reload
L5.2 –2 Rev. 11.12

Configuring PVST+/MSTP Interoperability: HP at the Aggregation Layer
Configure PVST+ on Cisco and MSTP on HP

3. Configure the Cisco switches to use Rapid PVST+ mode for spanning tree.
On the Cisco switches, enter:
Cisco(config)#spanning-tree mode rapid-pvst
Leave the settings at their defaults (default priority in each VLAN and short for
the path cost calculation method).
4. The HP switches should be implementing MSTP.
MSTP Settings
Parameter Setting
Name HP-Cisco
Revision 1
y
nl
O
5. Define HP-C as the root in instance 0 and 1 and as the backup root in instance
2. Define HP-D as the root in instance 2 and as the backup root in instance 0
Se
and 1.
On HP-C, enter these commands:
lU
[HP-C]#stp instance 0 root primary
a
[HP-C]#stp instance 1 root primary

rn
[HP-C]#stp instance 2 root secondary

te
On HP-D, enter these commands:

In
[HP-D]#stp instance 0 root secondary

[HP-D]#stp instance 1 root secondary
P
[HP-D]#stp instance 2 root primary

H
6. Check the spanning tree configuration and port statuses on each switch.
r
On Cisco switches, enter these show commands:

Fo

Cisco# show spanning-tree vlan X
Record the following information:
Which switch is the root in VLAN 1? Explain why.
___________________________________________________________________
__________________________________________________________________
__________________________________________________________________
__________________________________________________________________
Rev. 11.12 L5.2 –3

Which switch is the root in other VLANs? Explain why.
___________________________________________________________________
__________________________________________________________________
__________________________________________________________________
__________________________________________________________________
What are the port costs on the Cisco switches?
y
nl
__________________________________________________________________
O
__________________________________________________________________
Se
__________________________________________________________________
lU
On the switch or switches that are not root:
a
rn
 Which port is the root port? ______________________________________

te
In
 What is the root path cost? ______________________________________

P
Which ports are blocked or alternate ports?

r H
__________________________________________________________________
Fo
__________________________________________________________________
__________________________________________________________________
Verify the configuration

7. The laptops should be connected to the Cisco switches in VLAN 12. Check their
IP addresses. Then start a continuous fping between laptop 1 and laptop 2.
8. Test the redundant connections. In the table, record how long failover takes to
occur when you disconnect various uplinks. Always reconnect the uplink before
disconnecting another uplink.
L5.2 –4 Rev. 11.12

Time for failover

Time for failover at Time for failover at
Disconnected uplink
disconnect reconnect
Cisco-A to HP-C
Cisco-A to HP-D
Adjust the configuration

9. Set the path cost method to long on both Cisco switches.
Cisco(config)# spanning-tree portcost method long
10. On the Cisco switches, check the port statuses. Have the alternate ports
changed?
__________________________________________________________________
y
nl
11. Change the priority on Cisco-A so as to make it the root for all VLANs except 1.
O
Cisco(config)# spanning-tree vlan 11-13 priority 0
OR
Se
Cisco(config)# spanning-tree vlan 11-13 root primary
lU
12. Check the port statuses on the Cisco switches. Fill in the tables. (Not every
column will be filled.)
a
Cisco-A port statuses

rn
VLAN Root port Designated port Alternate port

te
1
11
In
12
13
P
H
Cisco-B port statuses

r
VLAN Root port Designated port Alternate port

Fo
1
11
12
13
Implement load balancing

You will now implement load balancing over the two uplinks. In the end, the
topology should be as follows for both Cisco-A and Cisco-B:
 The root port for VLAN 12 is the link to HP-C.
 The root port for VLANs 1, 11, and 13 is the link to HP-D.
Rev. 11.12 L5.2 –5

13. On each uplink port, adjust the port cost to either 10000 or 30000 on a per-
VLAN basis. Choose whether to increase or decrease the cost on that particular
port for that particular VLAN based on the correct root ports indicated above.
Cisco(config-if)#spanning-tree vlan 12 cost 10000
Cisco(config-if)#interface gig 1/0/2
Cisco(config-if)#spanning-tree vlan 1,11,13 cost 10000
Note
As usual, enter the correct interface ID according to your Port Mapping table.
14. Next you will verify that convergence has occurred. If necessary, restart the
continuous fping between laptop 1 and laptop 2 (which should both be in
VLAN 12).
y
nl
15. In the table, record how long failover takes to occur when you disconnect
O
various uplinks. Always reconnect the uplink before disconnecting another
uplink.
Se
Time for failover
lU
Time for failover at Time for failover at
Disconnected uplink
disconnect reconnect
a
HP-C to Cisco-A
rn
HP-C to Cisco-B
HP E to Cisco-A
te
HP E to Cisco-B
In
Implement VRRP on HP Distribution

P
16. If the Cisco switches are implementing HSRP, which you configured in a previous
H
lab, remove the HSRP configurations.

r
17. Configure VRRP on the HP switches:

Fo
 The virtual IP address for each VLAN is 10.POD.VLAN.254.

 The master is configured in preempt mode.
 Synchronize the VRRP roles with the MSTP roles:
 HP-C is Master in VLAN 12.
 HP-D is Master in VLANs 1, 11, and 13.
On HP-C, enter:
[HP-C]interface Vlan-interface1
[HP-C-Vlan-interface1] vrrp vrid 1 virtual-ip 10.1.1.254
L5.2 –6 Rev. 11.12
[HP-C-Vlan-interface12] vrrp vrid 12 priority 254
[HP-C-Vlan-interface12] vrrp vrid 12 preempt-mode
On HP-D, enter:
[HP-D]interface Vlan-interface1
[HP-D-Vlan-interface1] vrrp vrid 1 virtual-ip 10.1.1.254
y
[HP-D-Vlan-interface1] vrrp vrid 1 priority 254
nl
[HP-D-Vlan-interface1] vrrp vrid 1 preempt-mode
O
Se
lU
a
rn
te

In
P

H

r

Fo
You will now explore how VRRP interoperates with your MSTP and PVST+
configuration to provide redundancy for routed traffic.
18. Connect Server_1 to HP-C on a port that is untagged for VLAN 11. (Leave
Client_1’s connection as is.)
19. Verify that both laptops have received an IP address. On each laptop, start a
continuous fping to the other laptop.
20. Disconnect the link between HP-C and Cisco-A. How long does it take for
failover to occur?
___________________________________________________________________
Rev. 11.12 L5.2 –7

21. Reconnect the port. How long does it take for failover to occur?
__________________________________________________________________
22. Save the configuration on HP-C. Then reboot the switch. How long does it take
for failover to occur?
___________________________________________________________________
23. After HP-C comes back up, how long does it take for failover to occur again?
__________________________________________________________________
y
24. Do not save the configuration. You will not need to use it for a later lab.
nl
O
Se
a lU
rn
te
In
P
r H
Fo
L5.2 –8 Rev. 11.12

Command reference
Set the native (untagged) VLAN. port trunk pvid vlan <ID>
Configure a port as an access port in a interface <type> <number>
VLAN. port-link-type access
port access vlan <ID>
Create a link aggregation interface. interface bridge-aggregation <group ID>
y
Assign a physical interface to the link interface <type> <number>
nl
aggregation group. port link-aggregation group <group ID>
Configure a link aggregation as a VLAN interface bridge-aggregation <group ID>
O
trunking port. port-link-type trunk
Set the native (untagged) VLAN. port trunk pvid vlan <VLAN ID>
Set the tagged VLANs.

Se
port trunk permit vlan <VLAN ID list>
lU
Configure the switch as the root for an MSTP stp instance <ID> root primary
a
instance.
rn
Configure the switch as the secondary root stp instance <ID> root secondary
for an MSTP instance.
te
Create a VRRP group on a VLAN interface interface vlan-interface <ID>

In
and set the virtual IP address. vrrp vrid <ID> virtual-ip <IP address>
Enable preemption (from the VLAN vrrp vrid <ID> preempt-mode [timer delay <seconds>]
P
interface view).
H
Assign the switch a priority for the vrrp vrid <ID> priority <value>
VRRP group (from the VLAN
r
interface view).
Fo
instance.
list>
Save the configuration to a named file. save <filename>
Rev. 11.12 L5.2 –9

config.

file.
Cisco Commands
Set the STP path cost calculation method. spanning-tree pathcost method [long | short]
y
nl
O
Se
lU
Configure the spanning tree path cost for a interface <type> <number>
port. spanning-tree vlan <ID> cost <cost>
a

rn
no shutdown
te
shutdown
In

P

H

r
Fo

configuration file.
L5.2 –10 Rev. 11.12

Implementing Redundant Links
Without STP
Module 6 Lab 1
Objectives
 Implement redundant links on HP switches without using a spanning tree
protocol (STP):
 Configure smart links groups on HP A-Series switches
y
Implement monitor link groups on HP A-Series switches
nl

Lab equipment
O
Lab 6.1: Redundancy without STP
Se
lU
Root Root
a
Rapid-PVST+
rn
P1 P1
Cisco-A Cisco-B
P4 P3
te
P3 P4
IP addressing:
In
10.POD.VLAN.X/24
X=1 on Cisco-A
X=2 on Cisco-B
P
X=3 on HP-C
X=4 on HP-D
H
P1 P2
P2 P1 X=5 on HP-E
HP-C HP-E
STP X=6 on HP-F
X=100 on Server_1
PC1
r
P3 disabled P3
X=101 on Client_1
PC2
Fo
Server_1
PC& Client_1
PC2
19 Rev. 10.41
Figure 6-1: Redundancy without STP

 Devices:
Rev. 11.12 L6.1 – 1

 One HP A-Series and one HP E-Series switches at the access layer (HP-C
and HP-E)
 Two PCs: Server_1 and Client_1
 Cabling:
 One link between the two Cisco switches
 Two links between each HP access layer switch and each Cisco switch (four
links total)
 One connection in VLAN 1 between Server_1 and HP-C
Lab steps
y
nl
O
Complete the initial setup
Se
1. Establish the connections as shown in Figure 6-1.
2. If the switches are not running the configuration from Lab 5.1, load the interop5a
lU
configuration. This contains management, VLAN, IP, and port configurations—as
well Rapid-PVST+ setup for Cisco-A and Cisco- B and MSTP setup for HP-C.
a

rn

te

In
Cisco# show boot

P
Cisco(config)#boot config flash:interop-5a.cfg

H
Cisco# reload
r

Fo

<HP-C> reboot

HP-E# reload
3. Verify the Cisco switches’ Rapid PVST+ configuration:

 The path cost method is set to long.
 Cisco-A is the root for VLANs 1, 11, and 13 (priority 0); it is the secondary
root for VLAN 12 (priority 4096).
L6.1 – 2 Rev. 11.12

Implementing Redundant Links Without STP
 Cisco-B is the secondary root for VLANs 1, 11, and 13 (priority 4096); it is
the root for VLAN 12 (priority 0).
Disable STP on the HP Edge switches

4. Disable STP globally on the HP switches.
[HP-C] stp disable

HP-E(config)# no spanning-tree
5. On Cisco-A and Cisco-B, reset the port cost on P1 to the default (20000):
Cisco(config) int gig 1/0/1
y
Cisco(config-if)#no spanning-tree vlan 1-13 cost
nl
O
Note
As usual, in this and subsequent commands, specify the correct interface ID
Se
according to your Port Mapping table.
In a moment, you will check the PVST+ status on Cisco-A and B. To understand what
lU
you see, remember that with STP disabled on the edge switches, the two Cisco
switches seem to be connected together through three links from the “point of view”
a
of their spanning tree protocols.

rn
If you need help further help understanding what you see, please draw a network
te
with Cisco-A and Cisco-B connected by three direct connections. On this drawing,
In
note the ports and their costs. Remember that when three links have equal cost,
spanning tree uses the neighbor’s port ID (the prio-port number) to determine which
P
port is root port (on the non-root switch). The other criteria that typically determine
H
the root port (first, the root path cost and, then, the neighbor bridge ID) do not apply
because the root path cost is the same on all ports as is the neighbor ID.
r
Fo
6. Check the PVST+ status on Cisco-A and B.

Record the following ports on these switches:

 Root port in VLAN 1: ______________________________________________
 Alternate/blocked port in VLAN 1: __________________________________
 Root port in VLAN 11 and 13: ______________________________________
 Alternate/blocked port in VLAN 11 and 13 ___________________________

Rev. 11.12 L6.1 – 3
 Root port in VLAN 12: _____________________________________________
 Alternate/blocked port in VLAN 12? _________________________________
Explain why the ports have been assigned these roles.

__________________________________________________________________
__________________________________________________________________
__________________________________________________________________
y
What STP parameter can you change on Cisco-A and Cisco-B to guarantee P1
nl
(the link between Cisco switches) will be the root port on the secondary root?
O
__________________________________________________________________
Se
__________________________________________________________________
lU
__________________________________________________________________
a
rn
__________________________________________________________________
te
In
7. On Cisco-A and Cisco-B, reduce the cost on P1 for all VLANs to make it the
Root port.
P
Cisco(config)# interface gigabit 1/0/1

H
Cisco(config-if)# spanning-tree cost 10000

r
Fo
Note
Note that in real life, in most cases the link between the distribution switches will
be a link-aggregation of gigabit ports or 10 Gigabit ports. A port-channel is
automatically assigned a lower cost than the ports within the channel. In that
case, the port channel would automatically be chosen as the root port on the
non-root distribution switch without your altering the costs.
8. Draw your own figure of the lab topology in the different VLANs.
For each VLAN, label the ports on each Cisco switch:
 Root Port (RP)
 Alternate/blocked Port (BP)
 Designated port (DP)
L6.1 – 4 Rev. 11.12

Root Root
Rapid-PVST+
P1 P1
Cisco-A Cisco-B
P4 P3
P3 P4
P1 P2
y
P2 P1
nl
HP-C HP-D
STP
O
P3 P3
disabled
PC1
Server_1
Se Client_1
PC2
lU
Figure 6-2: VLAN 12 spanning tree
a
Root Root
rn

Rapid-PVST+
te
P1 P1
Cisco-A Cisco-B
In
P4 P3
P3 P4
P
Hr
Fo
P1 P2
P2 P1
HP-C HP-D
STP
P3 P3
disabled
PC1
Server_1 Client_1
PC2
Figure 6-3: VLANs 1, 11, and 12 spanning tree
Rev. 11.12 L6.1 – 5

9. To test convergence failover time, verify that Server_1 and Client_1 are
connected to port P3 of HP-C and HP-E in VLAN 1.
10. Start a continuous fping between Client_1 and Server_1 with a 1 sec timeout.
C:>fping 10.POD.1.100 –c
11. Disable port P1 on HP-C or HP-E. Determine how long it takes for failover to
occur. Then re-enable the port.
[HP]interface GigabitEthernet 1/0/1
[HP-GigabitEthernet1/0/1]shutdown
[HP-GigabitEthernet1/0/1]undo shutdown
__________________________________________________________________
y
nl
__________________________________________________________________
O
Se
Why? lU
__________________________________________________________________
a
__________________________________________________________________
rn
te
Based on your findings, when would you recommend this configuration?

In
__________________________________________________________________
P
H
__________________________________________________________________
r
Fo
__________________________________________________________________
L6.1 – 6 Rev. 11.12

Configure and test smart link

Root Root
Rapid-PVST+
P1 P1
Cisco-A Cisco-B
P4 P3
P3 P4
Smart Link
group 1 & 2
P1 P2
HP-C P2 P1 HP-E
HP-E
P3 P3
P3
y
nl
Server_1 Client_1
O
Figure 6-4:Smart link
Se
Complete the following steps to configure smart links on HP-C (you will not use HP-E
lU
in this part of the lab):
12. Enable STP globally on HP-C.
a
13. Disable STP individually on uplinks P1 and P2. STP must be disabled on a port
rn
when you configure the smart link feature on it.

te
[HP]stp enable
In

[HP-GigabitEthernet1/0/1]stp disable
P
H

[HP-GigabitEthernet1/0/2]stp disable
r
14. Make sure that the MSTP instances defined in the previous labs are configured
Fo
on the HP-C switch. Enter:

[HP] display stp region-configuration
MSTP instances
MST instance VLANs
1 12
2 1, 11, and 13
Rev. 11.12 L6.1 – 7

15. Configure two smart link groups on HP-C:

 Associate smart link group 1 with instance 0 and 1.
[HP]smart-link group 1
[HP-smlk-group1]protected-vlan reference-instance 0 to 1
[HP-smlk-group1]preemption mode role
[HP-smlk-group1]port GigabitEthernet 1/0/1 master
[HP-smlk-group1]port GigabitEthernet 1/0/2 slave
 Associate smart link group 2 with instance 2.

[HP]smart-link group 2
[HP-smlk-group2]protected-vlan reference-instance 2
[HP-smlk-group2]preemption mode role
y
[HP-smlk-group2]port GigabitEthernet 1/0/2 master
nl
[HP-smlk-group2]port GigabitEthernet 1/0/1 slave
O
Note that with the current configuration on HP-C:
Se
 STP is disabled on uplinks, and redundancy is managed by Smart Link.
 All standard BPDUs received from upstream switches are discarded because
lU
STP is disabled.
All PVST+ BPDUs received on VLANs on one uplink are not transmitted on the
a

rn
other uplink because the other uplink is blocked in those VLANs.

STP is maintained on edge ports, which ensures protection from any loops that
te
may occur on edge ports.

In
16. Check the smart link groups’ status.

P
<HP>display smart-link group 1

H
<HP>display smart-link group 2

r
Record the HP-C ports that play these roles:

Fo
Master on Group 1:________________ Slave on Group 1:_________________
Master on Group 2:________________ Slave on Group 2:_________________
17. Start a continuous fping between Client_1 and Server_1 with a 50ms timeout.
C:>fping 10.POD.1.100 –c –t 50 –w 50
L6.1 – 8 Rev. 11.12

18. Disable port P1 on HP-C. Determine how long it takes for failover to occur. Then
re-enable the port.
[HP-GigabitEthernet1/0/1]shutdown
[HP-GigabitEthernet1/0/1]undo shutdown
__________________________________________________________________
__________________________________________________________________
Why?
y
nl
__________________________________________________________________
O
__________________________________________________________________
Se
lU
19. Disable the port between the two Cisco switches. Determine how long it takes
for failover to occur. Then re-enable the port.
a
Cisco-A(config)#interface GigabitEthernet 1/0/1

rn
Cisco-A(config-if)#shutdown
te
Cisco-A(config-if)#no shutdown
In
What happens? Why?

P
__________________________________________________________________
H
__________________________________________________________________
r
Fo
To avoid the failure of the link between the two Cisco switches, it is recommended
that you connect the switches with a link aggregation (port channel).
Configure a monitor link on the HP A-Series switches (optional)

The monitor link feature –named Uplink Failure Detection on Cisco---ties the status of
a downlink to the status of an uplink. Monitor link is commonly used with servers
that implement NIC teaming. A switch’s monitor link disables the downlink to which
the server connects if the switch’s uplink fails. This action triggers the server’s NIC to
failover so that it uses a connection to a switch with a good connection.
This lab does not feature a NIC teaming solution. Therefore, you will simply verify
that the downlink status alters based on the uplink status.
Rev. 11.12 L6.1 – 9

20. On HP-C and HP-D, remove the smart link groups. You must shut down the
interfaces and remove the interfaces’ smart-link groups first in order to avoid
loops.
[HP-C]interface gig 1/0/1
[HP-C-GigabitEthernet1/0/1]undo port smart-link group 1
[HP-C-GigabitEthernet1/0/1]quit
y
nl
[HP-C-GigabitEthernet1/0/2]quit
[HP-C]undo smart-link group 1
O
[HP-C]undo smart-link group 2
Se
21. Change the cabling based on the figure: lU
Root Root
Rapid-PVST+
a
P1 P1
Cisco-B
rn
Cisco-A
P4 P3
P3 P4
te
In
P
Uplink
H
P1 P2
r
HP-C P2 P1 HP-E
Fo
P3 Downlink P3
Server_1
PC1 Client_1
PC2
Figure 6-5: Monitor link
 P1 on HP-C is the “uplink” and P3 will be the “downlink” in the monitor

group
 Note that this configuration is not a real word situation but only a way to
test the monitor link feature in the lab environment. You learned the correct
to use this feature in Module 6.
L6.1 – 10 Rev. 11.12

22. On both HP-C and HP-D, verify that port P1 is set as trunk and has STP
disabled:
[HP]interface gigabit 1/0/1
[HP-GigabitEthernet1/0/1]display this
#
interface GigabitEthernet1/0/1
port link-type trunk
port trunk permit vlan all
stp disable
23. On HP-C, verify port that P2 is shutdown to avoid a loop.

y
[HP-C-GigabitEthernet1/0/2] shutdown
nl
24. On HP-C, configure a monitor link group with:
O
 P1 set as the uplink port
Se
 P3 set as the downlink port
[HP] monitor-link group 1
lU
[HP-mtlk-group1]port GigabitEthernet 1/0/1 uplink
[HP-mtlk-group1]port GigabitEthernet 1/0/3 downlink
a
rn
25. On HP-C, enable interface P1 and verify the monitor link group:
te

In
P
[HP-C]display monitor-link group 1

H
26. Disable the uplink P1 on HP-C

r

Fo
[HP-C-GigabitEthernet1/0/1] shutdown
27. Check the status of the monitor link group on HP-C.

Can you see the interface that connects to Server_1 going down?
_____________________________________________________________________
28. Re-enable uplink P1 on HP-C.
Rev. 11.12 L6.1 – 11

29. Check the status of the monitor link group on HP-C.

Can you see the interface that connects to Server_1 going up?
_____________________________________________________________________
30. You have completed the lab. Do not save the configuration because you will not
need it for a later lab (or save the configuration only for your own purposes).
y
nl
O
Se
a lU
rn
te
In
P
r H
Fo
L6.1 – 12 Rev. 11.12

Command reference
Set a named configuration file as the startup saved-configuration <filename>
startup-config.

Enable and disable STP globally. [undo] stp enable
y
nl
Assign VLANs to an MST instance. stp region configuration
O
instance <instance ID> vlan <VLAN ID list>
Create (or remove) a smart link group. [undo] smart-link group <group ID>
Se
Attach the group to an MST protected-vlan reference-instance <instance ID>
instance.
Configure a switch port as the port <type> <number> [master | slave]
lU
master or slave for this group.
Enable preemption. preemption mode role
a
Configure a monitor link group. monitor-link group <group ID>

rn
Configure a switch port as the port <type> <number> [uplink | downlink]

uplink or downlink for this group.
te
Disable (or enable) a port. interface <type> <number>

In
[undo] shutdown
View the smart link group status. display smart-link group <all | group ID>
P
View the monitor link group status. display monitor-link group <all | group ID>
H

r
instance.
Fo
list>
Rev. 11.12 L6.1 – 13

Cisco Commands
Set the STP path cost calculation method. spanning-tree pathcost method [long | short]
Configure the PVST+ cost for a port in a interface <type> <number>

VLAN. spanning-tree vlan <ID> cost <cost>
Reset the PVST+ cost for a port in a VLAN. interface <type> <number>
y
no spanning-tree vlan <ID> cost
nl
no shutdown
O
shutdown
Se
lU
a

rn

te
configuration file.
In
P
r H
Fo
L6.1 – 14 Rev. 11.12

Configuring
Spanning Tree Hardening
Optional Module 7 Lab 1
Objectives
It is highly recommended that you harden the spanning tree protocol in any
spanning tree implementation. Understanding your options for hardening spanning
tree, and how to implement these options on any vendors’ platform, will ensure
stability in your LAN. However, this lab, as the associated module, is optional
because hardening spanning tree does not introduce any new interoperability issues.
y
This lab, if you choose to complete it, teaches you how to implement the same
nl
features on HP and Cisco platforms and to compare the features.
O
Se
 Harden spanning tree functions on Cisco and HP switches
Test the hardening features and understand their effects
lU

Lab equipment
a
rn
Root Root
te
P1 P1
In
Cisco-A Cisco-B
P3 P4 P3 P4
P
P2 MSTP Region
H
Name: HP-Cisco
MSTP Revision: 1
r
Fo

P1 P2 P2
P1
HP-C HP-E
P3 P3
HP-D
Figure 7-1: Configuring spanning tree hardening
Rev. 11.12 L7.1 –1


 Devices:
 One HP A5800 and one HP-E3500 at the access layer (HP-C and HP-E)
 One HP A5800 (HP-D) that will be used to create issues at the access layer.
Note
HP-D is not part of the topology. You will connect it to various switches
throughout the lab in order to create looped topologies or simulate threats to STP
operations.
 Cabling:
y
 One link between the Cisco switches
nl
 One link each between the HP switches at the access layer (HP-C and D)
O
and the Cisco switches (four links total)
Se
 P3 on HP-C and HP-E is the access port on which you will create the issues.
Important
lU
! Do not establish the connections yet. The lab will indicate when you should do
so.
a
rn
Lab steps
te

In
1. Load the interop4a configuration from Lab 4.1 on Cisco-A, Cisco-B, HP-C, and
P
HP-E.
H

r

Fo

Cisco-A# show boot
Cisco-A# reload

<HP-C> reboot
L7.1 –2 Rev. 11.12

Configuring Spanning Tree Hardening

HP-E# reload
2. On HP-D, erase the configuration

<HP-D> reset saved-config
<HP-D> reload
3. Enable STP on HP-D.

[HP-D] stp enable
4. Establish the physical connections displayed in Figure 7-1 but do not connect HP-
D at this point.
y
Configure and test BPDU guard/BPDU protection
nl
O
Root Root
Se
P1 P1
Cisco-A Cisco-B
P3 P4 P3 P4
lU
MSTP Region
P2
Name: HP-Cisco
a
Revision: 1
MSTP
rn
2 MST Instance 1: VLAN 12

te
P2
In
P1 P2 P1
HP-C HP-E
1 3
P
P3 P3
r H
HP-D
Fo
Figure 7-2: BPDU guard/protection
5. Verify that each port has the correct role. These uplink ports should be non-edge
ports:
 P1 and P2 on HP-C and HP-E
 P1, P3, and P4 on Cisco-A and Cisco-B
Rev. 11.12 L7.1 –3

On Cisco switches, no specific command exists to display which ports are non-
edge and which are edge/PortFast ports. By default, trunk ports are not PortFast
enabled. Verify that PortFast is enabled globally or on interface with the span
portfast command. You can also check the running configuration:
Cisco# show run
-> spanning-tree portfast default
Cisco# show run int gig 1/0/2
-> spanning-tree portfast
On HP A-Series switch, HP-C, enter:

<HP-C> display stp
On HP E-Series switch, HP-E, enter:

HP-E# show span
y
nl
6. Make sure edge ports are set as STP edge ports. These ports are P3 on HP-C
and HP-E. On Cisco-A and Cisco-B, you must configure P2 as an access port in
O
VLAN 1 and set it as an edge port.
Se
Cisco(config)# int gig 1/0/2
lU
Cisco(config-if)# switchport mode access
a
Cisco(config-if)# switchport access vlan 1

rn
Cisco(config-if)# spanning-tree portfast

te

In
[HP-C] int GigabitEthernet1/0/3

[HP-C-GigabitEthernet1/0/3]stp edged-port enable
P

H
HP-E(config)# spanning-tree 3 admin-edge-port

r
Fo
Note
As usual, use the interface IDs that are correct for your environment based on
your Port Mapping table.
7. Configure BPDU guard/BPDU protection:

 On Cisco-A, enable BPDU guard on P2 and set the timeout for recovery to
30 seconds.
 On HP-C and HP-E, enable BPDU guard or BPDU protection on port P3. Set
the timeout for recovery to 30 seconds on HP-E. Timeout recovery is not
available on HP A-Series switches (HP-C).
L7.1 –4 Rev. 11.12

On the Cisco switch, Cisco-A, enter:

Cisco-A(config-if)#spanning-tree bpduguard enable
Cisco-A(config)# errdisable recovery cause bpduguard
Cisco-A(config)# errdisable recovery interval 30
On HP A-Series switch, HP-C, BPDU-protection is enabled globally and applies

to STP edge ports. Enter
[HP-C]stp bpdu-protection
On HP E-Series switch HP-E, set BPDU protection for a range of ports. Enter:
HP-E(config)# spanning-tee 3-24 bpdu-protection
HP-E(config)# spanning-tree bpdu-protection-timeout 30
8. In this step, you test the feature.
y
Root Root
nl
O
P1 P1
Cisco-A Cisco-B
Se
P3 P4 lU P3 P4
P2
MSTP
a
2
rn
te
P1 P2 P2
In
P1
HP-C HP-E
1 3
P
P3 P3
r H
Fo
HP-D
Figure 7-3: Test BPDU guard/protection
a. Connect Port P1 on HP-D to P3 on HP-C.

 You should have already enabled STP on HP-D. Verify that it is
enabled, and, if not, enable it now. What do you observe on HP-C?
_____________________________________________________________
 Disable STP on HP-D. What do you observe on HP-C?
_____________________________________________________________
Rev. 11.12 L7.1 –5

 Enable P3 manually.
b. Connect Port P1 on HP-D to P2 on Cisco-1.

 Enable STP on HP-D. What do you observe on Cisco-A?
_____________________________________________________________
 Disable STP on HP-D. What do you observe on Cisco-A after 30 sec?
_____________________________________________________________
y
c. Connect Port P1 on HP-D to P3 on HP-E.
nl
 Enable STP on HP-D. What do you observe on HP-E?
O
Se
_____________________________________________________________
lU
 Disable STP on HP-D. What do you observe on HP-E after 30 sec?
a
rn
_____________________________________________________________
te
_____________________________________________________________
In
P
d. Disconnect HP-D so that it is not connected to any other switch.

r H
Fo
L7.1 –6 Rev. 11.12

Configure loop protect on an HP E-Series switch

Root Root
P1 P1
Cisco-A Cisco-B
P3 P4 P3 P4
P2
MSTP
y
nl
P1 P2 P1
HP-C
O
HP-E
P2
P3 P3
Se
a lU
Figure 7-4: HP E-Series loop protect
rn
9. On HP E-Series switch HP-E, configure the loop protect feature.

te
a. Shutdown P2 and P3.

In
HP-E(config)# int 2-3 disable

P
b. Disable STP.
H
HP-E(config)# no spanning-tree
c. Enable loop protection on the edge ports P2 and P3.

r
Fo
HP-E(config)# loop-protect 2-3
d. Set the loop protection recovery timeout to 30 seconds and enable the
switch to send a trap when it detects a loop.
HP-E(config)# loop-protect disable-timer 30
HP-E(config)# loop-protect trap loop-detected
HP-E(config)# show loop-protect
10. Connect P2 to P3 and enable P2 and P3 on HP-E.

HP-E(config)# int 2-3 enable
11. Verify loop protect is in action.

HP-E(config)# show loop-protect
Look at the time since last loop detected into the display.
Rev. 11.12 L7.1 –7

12. Look for messages containing “loop” into the logging buffer
HP-E# show logging –r loop
or
HP-E# log –r loop
“-r” starts display from most recent events.

13. On HP-E, disconnect port P2 from P3.
14. Enable spanning-tree.
HP-E(config)# span
15. On HP-E, remove loop protect

HP-E(config)# no loop-protect all
16. On HP A-Series switch HP-C, you can similarly configure and test loopback
y
detection. To configure the feature, follow these steps:
nl
a. Shutdown P2 and P3.
O
[HP-C] interface gigabit 1/0/2
Se
[HP-C-Gigabit1/0/2] shutdown
[HP-C-Gigabit1/0/2] interface gigabit 1/0/3
lU
[HP-C-Gigabit1/0/3] shutdown
b. Disable STP.
a
rn
[HP-C] undo stp enable

c. Enable loopback detection globally and in all VLANs.
te
[HP-C] loopback-detection enable

In
[HP-C] loopback-detection enable vlan all

P
d. Enable loopback detection on ports P2 and P3. You must enable this
feature globally and on the desired ports.
H

r
Fo
[HP-C-Gigabit1/0/2] loopback-detection enable

[HP-C-Gigabit1/0/3] loopback-detection enable
e. Enable loopback detection control on ports P2 and P3. When you configure
this option, which is available for hybrid or trunk ports, in addition to
detecting loops and sending a trap message if a loop is detected, loopback
detection also takes action. In this lab, you do not specify a specific action,
so loop detection will place the port in controlled mode if a loop is
detected. In controlled mode, the port drops all incoming traffic but still
forwards outgoing traffic.
[HP-C-Gigabit1/0/2] loopback-detection control enable
[HP-C-Gigabit1/0/3] loopback-detection control enable
L7.1 –8 Rev. 11.12

f. Set the loopback detection recovery timeout to 30 seconds.

[HP-C] loopback-detection interval-time 30
17. You will now test the loopback detection feature. On HP-C, connect P2 to P3
and enable those two ports.
[HP-C-Gigabit1/0/2] undo shutdown
[HP-C-Gigabit1/0/3] undo shutdown
Note
In a remote lab environment, you might not be able to establish a connection
between two ports on the same switch. You will need to disable STP on HP-D and
connect HP-D to both ports on HP-C.
y
nl
18. Verify that loop detection detects the loop and takes action.
O
[HP-C] display loopback-detection
Se
19. Look for messages containing “loop” into the logging buffer
[HP-C] display info-center | include loop
lU
20. On HP-C, disconnect port P2 from P3.
a
21. Enable spanning-tree.

rn
[HP-C] stp enable

te
22. On HP-C, remove loopback detection.

In
[HP-C] undo loopback-detection enable

P
r H
Fo
Rev. 11.12 L7.1 –9

Implement BPDU filtering

Root Root
P1 P1
Cisco-A Cisco-B
P3 P4 P3 P4
P2
MSTP
y
nl
P1 P2 P2
P1
O
HP-C HP-E
P3
P3 Vlan 200
Se
Figure 7-5: BPDU filtering
lU
23. On HP-E, make sure that P1 is connected to Cisco-A and P2 to Cisco-B and that
a
MSTP is enabled.
rn
24. You will now create a situation that requires BPDU filtering to protect a link from
te
being inappropriately blocked by STP.

In
You might want to set up BPDU filtering on links such as:


P
A routed link
H
 A dedicated link that carries traffic for a specific VLAN that is not carried by
other links
r
Fo
Although these links do not introduce a loop in the VLAN topology, MSTP blocks
them. Therefore, you must configure BPDU filtering to protect the link from being
blocked.
25. On HP-C and HP-E, define P3 as an access port of VLAN 200.
[HP-C]vlan 200
[HP-C-vlan200]port GigabitEthernet 1/0/3

HP-E(vlan-200)# untagged 3
L7.1 –10 Rev. 11.12

Important
! Verify that BPDU protection is disabled on P3 on both switches. Verify that loop
protect is disabled on P3 on the HP E-Series switch.
26. On HP-C, make sure that the uplinks are configured to permit only VLANs 1 (as
the untagged VLAN), 11, 12, and 13. For the switch to avoid a loop in VLAN
200, the uplink must not permit all VLANs.
[HP-C]int gig 1/0/1
[HP-C-GigabitEthernet1/0/1]port trunk permit vlan 1 11 to 13
[HP-C]int gig 1/0/2
[HP-C-GigabitEthernet1/0/2]port trunk permit vlan 1 11 to 13
27. On HP-E, you manually add VLANs to ports, so the uplink port should only
y
belong to VLAN 1 (as the untagged VLAN), and VLANs 11, 12, and 13. You can
nl
verify with this command:
O
HP-E# show vlan port 3
28. Configure an IP address for VLAN 200 on each switch:

 HP-C = 10.POD.200.3/24
Se
lU
 HP-E = 10.POD.200.5/24
a
rn
[HP-C]interface vlan 200

te
[HP-C-Vlan-interface200] ip address 10.1.200.3 24

In
HP-E(vlan-200)# vlan 200 ip address 10.1.200.5/24

P
Note
H
The example commands show a specific IP address, but you should enter the
correct IP address for your POD number.
r
Fo
29. Connect P3 on HP-E to P3 on HP-C.

30. Look at the spanning-tree status on HP-C and HP-E.
You should observe that one side of each connection is blocked? Why?
________________________________________________________________
________________________________________________________________
Can you ping between HP-C and HP-E in VLAN 200?
________________________________________________________________
Rev. 11.12 L7.1 –11

31. Disable STP on P3 on HP-C and enable BPDU filtering on P3 on HP-E.

[HP-C-GigabitEthernet1/0/3]stp disable
On HP E-Series switch, HP-C, enter:

HP-E(config)# span 3 bpdu-filter
Now can you ping between HP-C and HP-E in VLAN 200?
________________________________________________________________
32. Disconnect HP-C from HP-E on port P3.

33. On HP-E, remove BPDU filtering and configure P3 as untagged in VLAN 1.
y
34. On HP-C, enable STP on P3 and define P3 as an access port in VLAN 1.
nl
O
Configure root guard
Se
Root Root
lU
P1 P1
Cisco-A Cisco-B
P3 P4 P3 P4
a
Root Guard
rn
Root Guard
te
MSTP
In
P
P1 P2 P2
H
P1
HP-C HP-E
r
P3 P3
Fo
Define as
Root
Figure 7-6: Configure root guard
You will now simulate a situation in which the root and secondary root receive BPDU
with lower priorities.
35. On both Cisco-A and Cisco-B, enable root guard on ports P3 and P4, the ports
that connect to HP-C and HP-E.
Cisco-A(config-if)#int gig 1/0/3
Cisco-A(config-if)#span guard root
Cisco-A(config-if)#int gig 1/0/4
Cisco-A(config-if)#span guard root
L7.1 –12 Rev. 11.12

Do not set root guard on port P1 between the Cisco switches. Why?
___________________________________________________________________
36. To test root guard, you will set the STP priority to 0 on HP-C or HP-E. However,
first make sure that the priorities on Cisco-A and Cisco-B are not 0 in instance 0.
If this is the case, change priority as follows in the instance 0:
 Change any priority that is currently 0 to 4096.
 Change any priority that is currently 4096 to 8192.
37. On HP-C, define the switch’s priority as 0.
[HP-C]stp instance 0 priority 0
y
38. What effects do you observe on the Cisco switches? Which ports are blocked?
nl
Cisco-A#show logging | include ROOTGUARD
O
Cisco-A#show spanning-tree inconsistentports
Se
Cisco-A#show spanning-tree mst 0
___________________________________________________________________
lU
39. On HP-C, reverse the priority to the default setting:
a
rn
40. Does root guard automatically recover the ports blocked by root guard?
te
Cisco-A#show spanning-tree inconsistentports

In
Cisco-A#show spanning-tree mst 0

P
___________________________________________________________________
H
41. Consider STP hardening in general.

r
On what type of switch and on what type of ports do you configure various
Fo
features:
 Enable root guard:
 Type of switch: ______________________________________________
 Type of ports: : ______________________________________________
 Enable BDPU guard:
 Type of switch: : _____________________________________________
 Type of ports: : ______________________________________________
 Enable loop protect:
 Type of switch: : _____________________________________________
 Type of ports: : ______________________________________________
Rev. 11.12 L7.1 –13

 Enable BDPU filter:

 Type of switch: : _____________________________________________
 Type of ports: : ______________________________________________
42. You have completed the lab. Do not save the configuration because you will not
need it for a later lab (or save the configuration only for your own purposes).
y
nl
O
Se
lU
a
rn
te
In
P
r H
Fo
L7.1 –14 Rev. 11.12

Command reference
Copy a configuration from a TFTP server to copy tftp startup-config | running-config > <server IP
the running-config or startup-config. address > <filename >
Configure a port as an administratively spanning-tree <port ID list> admin-edge-port
assigned edge port.
Configure how the port determines its type spanning-tree <port ID list> point-to-point-mac [true | false
(point-to-point or not). | auto]
Enable (or disable) BPDU protection on a [no] spanning-tree <port ID list> bpdu-protection
port.
Configure the timeout for recovery on a port spanning-tree <port ID list> bpdu-protection-timeout
blocked by BPDU protection. <seconds>
Enable (or disable) loop protection on a [no] loop-protect <port ID list>
y
port.
nl
Configure the timeout for recovery on a port loop-protect <port ID list> disable-timer <seconds>
O
blocked by loop protection.
VLANs.
Se
lU
Enable (or disable) BPDU filtering on a port. [no] spanning-tree <port ID list> bpdu-filter
Enable or disable a port. interface <port ID> [enable | disable]
a
rn
te

View the MSTP configuration for an instance. show spanning-tree config <ist | instance ID>
In
ports.
P

H
config.
r

Fo

Set a named configuration file as the startup saved-configuration <filename>
startup-config.
Enable STP globally. stp enable
Configure a port as an edge port. interface <type> <number>

stp edged-port enable
Rev. 11.12 L7.1 –15


Configure how the port determines its type interface <type> <number>
(point-to-point or not). stp point-to-point [auto | force-false | force-true]
Enable (or disable) BPDU guard (protection) stp bpdu-protection
on all edge ports.
Disable (or enable) a port. interface <type> <number>
[undo] shutdown
Create a VLAN. interface vlan-interface <ID>
Configure a port as a trunk port. Interface <type> <number>

Set the native (untagged) VLAN. Port trunk pvid vlan <ID>
Set the tagged VLANs. Port trunk permit vlan <VLAN ID list>
y
Configure a port as an access port in a Interface <type> <number>
nl
O
Assign an IP address to a VLAN interface. Interface vlan-interface <ID>
Se
ip address <IP address> <subnet mask | prefix length>
Enable (or disable) STP on a particular port. interface <type> <number>
[undo] stp enable
lU
a
instance.
rn
te
list>
In

P
H

r
Fo
config.

file.
L7.1 –16 Rev. 11.12

Cisco Commands
Configure the STP mode to MSTP. spanning-tree mode mst
Configure PortFast as the default setting for spanning-tree portfast default

ports.
Configure an access port. interface <type> <ID>
switchport access vlan <VLAN ID>
Manually configure PortFast on a port. interface <type> <ID>
spanning-tree portfast
Enable the BPDU guard feature. spanning-tree bpduguard enable
Enable recovery for ports shut down by errdisable recovery cause bpduguard
BPDU guard.
Set the recovery interval. errdisable recovery interval <seconds>
y
Configure root guard on a port. interface <type> <ID>
nl
spanning-tree guard root
O
instance.
View the switch log and filter for root guard show logging | include ROOTGUARD
Se
events.
View the root inconsistency state. show spanning-tree inconsistentports
lU
a
View the MSTP region configuration. show spanning-tree mst configuration

rn

te

In

P
H

r
Fo

configuration file.
Rev. 11.12 L7.1 –17

y
nl
O
Se
lU
a
rn
te
In
P
r H
Fo
L7.1 –18 Rev. 11.12

Configuring Link
Aggregation and IRF
Module 8 Lab 1
Objectives
 Configure IRF on HP A-Series switches
 Create a link-aggregation between a Cisco switch and the HP IRF virtual device
Lab equipment
y
nl
O
Server_1 IP addressing:
10.POD.VLAN.X/24
Cisco-A
Se
PO2
X=3 on IRF
lU
P1 BR3 P1 X=5 on HP-E
XP1 XP1
a
HP-C HP-D X=100 on Server_1

rn
XP2 XP2
IRF IRF X=101 on Client_1
P2 P2
Master BR4 Slave
te
XP1: Ten GIG ports

In
P1 trk1 P2
HP-E
P
P3
H
Client_1
r
Figure 8.2: Configuring link aggregation and IRF

Fo
diagram above.
 Devices:
 One Cisco 3750 switch at the access layer (Cisco-A)
 One HP 3500 switch at the access layer (HP-E)
 Two HP A5800 switches in the distribution layer (HP-C and HP-D)
 Two laptops: Server_1 and Client_1
Rev. 11.12 L8.1 –1

 Cabling:
 Two 10 Gigabit links between HP-C and D, which will form the IRF port
 These ports are named XP1 and XP2 in following text
 One link-aggregation of two Gigabit links between Cisco-A and the IRF
 One cable connects to a port on HP-C
 One cable connects to a port on HP-D
 One connection in VLAN 12 between laptop 1 and Cisco-A
 One connection in VLAN 12 between laptop 2 and HP-C
Port naming
For Gigabit ports, continue to use the port mapping table that you defined in Lab 2.1:
y
Management.
nl
You instructor will tell you how to select the 10 Gigabit interfaces to be used on HP-C
O
and HP-D. Record the interface IDs for these ports in the table below.
Se
Port mapping (10 Gigabit ports)
Switches Port Interface TEN-Gigabit
lU
HP-C XP1
XP2
a
HP-D XP1
rn
XP2
te
Lab steps
In
1. Load the interop3a configuration on Cisco-A, HP-C, HP-D, and HP-E. You will not
P
use Cisco-B or HP-F in this lab.

H
Configure IRF
r
Fo
2. First, you will configure the IRF virtual device, which consists of:
 HP-C: IRF master
 HP-D: IRF slave
You will use the IRF settings shown in the table below.
IRF settings
Parameter Setting on HP-C Setting on HP-D
Member ID 1 2
Priority 32 1
3. Make sure that the 10 Gigabit ports on HP-C and HP-D are shutdown. After
shutting down the ports, save your configuration on both switch.
L8.1 –2 Rev. 11.12

Configuring Link Aggregation and IRF
4. Make sure that IRF is not already configured on HP-C or HP-D (perhaps by
another class).
[HP-C] display irf
On both switches, the IRF member ID should be 1. If this is not the case, you
must change the ID to 1 and reboot the switch. Enter these commands (on either
HP C or D as necessary):
[HP-C] irf member X renumber 1
[HP-C] quit
<HP-C> reboot
5. On HP-C, the IRF master, complete these tasks:
a. Set the IRF priority to 32.
b. Define IRF port 1/1 and associate the 10 Gigabit port XP1 with this port.
y
c. Define IRF port 1/2 and associate the 10 Gigabit port XP2 with this port.
nl
d. Activate the IRF port configuration.
O
e. Keep XP1 and XP2 shutdown until you have configured the IRF slave and
Se
saved its configuration.
lU
[HP-C] irf member 1 priority 32
a
[HP-C] display irf
rn
[HP-C] irf-port 1/1

te
[HP-C-irf-port 1/1] port group interface Ten-Gigabit

1/0/25
In
[HP-C-irf-port 1/1] quit

P
[HP-C] irf-port 1/2

H
[HP-C-irf-port 1/2] port group interface Ten-Gigabit

1/0/26
r
Fo
[HP-C-irf-port 1/2] quit

[HP-C] irf-port-configuration active
HP-C is now ready for IRF.
Note
For this and all subsequent commands, use the proper port IDs that you recorded
in the table at the beginning of the lab.
6. On HP-D, the IRF slave, complete these tasks:

a. Change IRF member ID from 1 to 2.
b. Save the configuration and reboot.
c. After the reboot, define IRF port 2/2 and associate the 10 Gigabit port XP1
with this port.
Rev. 11.12 L8.1 –3

d. Define IRF port 2/1 and associate the 10 Gigabit port XP2 with this port.
e. Activate the IRF port configuration.
f. Enable the 10 Gigabit ports XP1 and XP2.
g. Save your configuration before opening the ports on the IRF master.
[HP-D]irf member 1 renumber 2
[HP-D]quit
<HP-D>save
<HP-D>reboot
 After reboot, verify the IRF member ID is 2.
 Verify that the port numbering has changed to this format: “2/0/X.”
y
nl
<HP-D> display IRF
O
<HP-D> display brief interfaces
Se
[HP-D] irf-port 2/2
lU
[HP-D-irf-port 2/2] port group interface Ten-Gigabit
2/0/25
a
[HP-D-irf-port 2/2] quit

rn
[HP-D] irf-port 2/1

te
[HP-D-irf-port 2/1] port group interface Ten-Gigabit

2/0/26
In
[HP-D-irf-port 2/1] quit

P
[HP-D]irf-port-configuration active
r H
[HP-D-irf-port 1/1]int ten 2/0/25

Fo
[HP-D-Ten-GigabitEthernet2/0/25]undo shutdown
[HP-D-Ten-GigabitEthernet2/0/25]interface ten 2/0/26
[HP-D-Ten-GigabitEthernet2/0/26]undo shutdown
[HP-D-Ten-GigabitEthernet2/0/26]save
L8.1 –4 Rev. 11.12

7. Now that IRF slave’s configuration is ready and saved, enable the 10 Gigabit
ports on the IRF master, HP-C. (If the physical connections are not yet made,
make them.)
[HP-C-irf-port 1/1] int ten 1/0/25
[HP-C-Ten-GigabitEthernet1/0/25] undo shutdown
[HP-C-Ten-GigabitEthernet1/0/25] int ten 1/0/26
[HP-C-Ten-GigabitEthernet1/0/26] undo shutdown
[HP-C-Ten-GigabitEthernet1/0/26] save
The IRF slave then reboots automatically.

8. After the IRF slave has rebooted, verify the status of the IRF virtual device.
Note that a CLI session with HP-C and HP-D now provides the same prompt and
same effect. Try using the following display command, which should produce an
y
output such as this:
nl
O
<HP-C>display irf
Switch Role Priority CPU-Mac
Se
*1 Master 32 0023-89d9-c4dd
+2 Slave 1 0023-89d9-c399
lU
--------------------------------------------------
a
rn
* indicates the device is the master.

te
+ indicates the device through which the user logs in.

In
The Bridge MAC of the IRF is: 0023-89d9-c4dc

P
Auto upgrade : yes

H
Mac persistent : 6 min

Domain ID : 0
r
Fo
Is the IRF active? Which switches are the IRF master and the slave?:
______________________________________________________________
______________________________________________________________
What is the meaning of these symbols in the display the information:

*1:______________________________________________________________
+2:______________________________________________________________
Mac persistent:____________________________________________________
Rev. 11.12 L8.1 –5

9. View the IRF configuration:

<HP-C> display irf configuration
MemberID NewID IRF-Port1 IRF-Port2
1 1 Ten-GigabitEthernet1/0/25 Ten-GigabitEthernet1/0/26
2 2 Ten-GigabitEthernet2/0/26 Ten-GigabitEthernet2/0/25
Record the physical ports for the following IRF ports:

IRF 1/1:__________________________________________________________
IRF 1/2:__________________________________________________________
IRF 2/1:__________________________________________________________
y
nl
IRF 2/2:__________________________________________________________
O
10. View the IRF topology:
Se
<HP-C>display irf topology
Which switch is the neighbor of IRF-port 2/2?

a lU
______________________________________________________________
rn
Which switch is the neighbor of IRF-port 1/2?

te
In
______________________________________________________________
P
What information can you view with the display irf topology command that you
H
cannot view with the display irf configuration command?

r
______________________________________________________________
Fo
______________________________________________________________
______________________________________________________________
Configure a link aggregation between the access switches and

the IRF
You will now configure link-aggregation groups in static LACP mode between the
access switches (Cisco-A and HP-E) and the IRF virtual device.
These link aggregations will provide more redundancy because their physical links
connect to two different physical switches within the IRF virtual device.
L8.1 –6 Rev. 11.12

Note
Although this lab uses static LACP mode, you could alternatively configure static
link aggregation.
1. Before you set up link aggregation, shut down the interfaces on the access
switches. You will enable the interfaces after configuring link aggregation on
both sides.
2. On access switches Cisco-A, configure link aggregation in static LACP mode:
 Configure Port-Channel PO2 in Active mode.
 PO2 includes ports P3 and P4, which connect to ports P1 of HP-C and P1
of HP-D, respectively.

y
Configure the port channels as trunk ports.
nl
On Cisco-A, enter:
O
Cisco-A(config)# interface Port-channel 2
Se
Cisco-A(config-if)# interface range GigabitEthernet 1/0/3-4
Cisco-A(config-if)# shutdown
lU
Cisco-A(config-if)# channel-group 1 mode active
Cisco-A(config-if)# interface Port-channel 2
a
Cisco-A(config-if)# switchport trunk encapsulation dot1q

rn
Cisco-A(config-if)# switchport mode trunk

te
3. Also configure link aggregation in static LACP mode on the HP E-Series edge
switch (HP-E):
In
 Configure Trk1 in LACP mode.

P
 Trk1 includes ports P1 and P2, which connect to ports P2 of HP-C and P2 of
H
HP-D, respectively.
r

Fo
HP-E(config)# interface 1-2 disable

HP-E(config)# trunk 1-2 trk1 lacp
HP-E(config)# vlan 11 tagged trk1
4. On HP-C (the IRF), configure the link aggregations in Dynamic mode:

a. Bridge-aggregation interface 3 (BR3), which includes ports P1 of both
switches, connects to PO2 on Cisco-A.
b. Bridge-aggregation interface 4 (BR4), which includes ports P2 of both
switches, connects to Trk1 on HP-E.
Rev. 11.12 L8.1 –7

On the HP A-Series IRF switch, enter these commands to create BR3:

[HP-C]interface Bridge-Aggregation 3
[HP-C-Bridge-Aggregation3]link-aggregation mode dynamic
[HP-C-Bridge-Aggregation3]interface gi1/0/1
[HP-C-GigabitEthernet1/0/1]port link-aggregation group 3
[HP-C-GigabitEthernet1/0/1]interface gi2/0/2
[HP-C-Bridge-Aggregation3]port link-type trunk
[HP-C-Bridge-Aggregation3]port trunk permit vlan all
On the HP A-Series IRF switch, enter these commands to create BR3:
y
nl
O
[HP-C-Bridge-Aggregation4]link-aggregation mode dynamic
[HP-C-Bridge-Aggregation4]interface gi1/0/2
Se
lU
[HP-C-GigabitEthernet1/0/2]interface gi2/0/1
a
rn
te
[HP-C-Bridge-Aggregation4]port link-type trunk

In
[HP-C-Bridge-Aggregation4]port trunk permit vlan all
5. Now that both sides are configured, create the physical connections:
P
 Connect P1 of both IRF switches to Cisco-A P3 and P4.

H
 Connect P2 of both IRF switches to HP-E P1 and P2.

r
Fo
6. Enable the interfaces on Cisco-A and HP-E

Cisco-A(config-if)# interface range GigabitEthernet 1/0/3-4
Cisco-A(config-if)# no shutdown
HP-E(config)# interface 1-2 enable
7. On each switch, check the link aggregations:

 Verify the establishment of the LACP aggregated links.
 Verify the status of each port.
On Cisco switches, display the status of PO1 and PO2.
Cisco-A# show lacp neighbors
On HP A-Series, display the status of Bridge aggregation 1.
[HP-C]display link-aggregation verbose

L8.1 –8 Rev. 11.12
On HP E-series, display the status of trk1.

HP-E(config)# show trunk
HP-E(config)# show lacp
 Are the correct ports selected for link aggregation?

________________________________________________________________
 Does the IRF virtual device appear as one switch or as two switches?
________________________________________________________________
________________________________________________________________
y
________________________________________________________________
nl
O
a. Verify the Link Layer Discovery Protocol (LLDP) neighbors. Is neighboring
established per-link aggregation port or per-physical port?
Se
________________________________________________________________
lU
________________________________________________________________
a
rn
8. If the link-aggregation does not come up, try the following troubleshooting tips:
te
 Verify the setup of the port-channels/bridge-aggregations/trunks.

In
 Verify the setup of physical interfaces. Have they been associated with the
P
correct ID for the link-aggregation group?

H
 Disable and enable the physical interfaces of the link-aggregation group.

Check the status of the link aggregation.
r
Fo
 If these steps are not sufficient, then disable physical interfaces and
complete these steps:
1) Delete the configuration of physical interfaces and delete the link-
aggregation groups.
2) Make sure physical ports are shutdown.
3) Reconfigure the link aggregation by completing these steps in this exact
order:
 Create the link-aggregation group: port-channel on Cisco, bridge-
aggregation interface on HP A-series, Trunk on HP E-Series.
 Assign physical interfaces to the port channel, bridge-aggregation, or
trunk.
Rev. 11.12 L8.1 –9

 On Cisco and HP A-Series switches, configure the port-channel or

bridge-aggregation interface as a trunk port. On the HP E-Series switch,
tag the trk1 virtual port with the proper VLANs.
 Enable the physical interfaces.
 Check status of the link aggregation as described above.
9. Connect Server_1 (the Windows server) to P1 on Cisco-A. Configure this port as
an access port in VLAN 1.
10. Make sure Server_1 is configured with IP address 10.POD.1.100.
11. Connect Client_1 (the Windows client) to P3 on HP-E. Configure this port as an
access port in VLAN 1 (untagged membership).
12. Make sure Client_1 is configured with IP Address 10.POD.1.101.
y
13. Test connectivity.
nl
a. On Client_1, open the command prompt window and start a continuous
O
fping to Server_1 with a 10 ms timeout.
Se
C> fping 10.POD.1.100 –c -t 10 –w 10
If fping is not available, use ping.

lU
c. On HP-E, use menu commands to find out which physical port carries the
traffic.
a
rn
1) Enter this command:

te
HP-E# menu
In
2) In the menu, select 1. Status and Counters > 5. Port Counters.

3) On which port of trk1, does the Total frames counter increment?
P
H
4) Shut down that port on HP-E.

5) On Client_1, check the fping to see how long failover takes.
r
Fo
_____________________________________________________________
_____________________________________________________________
6) Re-enable the port on HP-E.

7) Check the time for failover (if any) on Client_1 in fping.
_____________________________________________________________
_____________________________________________________________
L8.1 –10 Rev. 11.12

14. Before ending this lab, split the IRF virtual device:
a. Delete the bridge-aggregation interfaces:
[HP-C]undo int br 3
[HP-C]undo int br 4
b. Shutdown all of the 10 Gigabit interfaces on HP-C.

[HP-C]int ten 1/0/25
[HP-C-Ten-GigabitEthernet1/0/25] shut
[HP-C-Ten-GigabitEthernet1/0/25]int ten 1/0/26
[HP-C-Ten-GigabitEthernet1/0/26]shut
y
nl
O
d. The IRF is now split. You must now connect to individual CLI sessions with
Se
HP-C and HP-D (note that HP-D is still named HP-C).
e. On HP-C, delete the configurations for the IRF ports:
lU
[HP-C]undo irf-port 1/1
a
[HP-C]undo irf-port 1/2

rn
f. On HP-D, complete these steps:

te
8) Rename the switch HP-D.

In
9) Delete the configurations for the IRF-ports.

10) Change the IRF ID from 2 to 1.
P
H
11) Reboot the switch.

r
[HP-C]sysname HP-D
Fo
[HP-D]undo irf-port 2/1

[HP-D]undo irf-port 2/2
[HP-D]irf member 2 renumber 1
Warning: Renumbering the switch number may result in
configuration change or loss. Continue?[Y/N]y
[HP-D]quit
<HP-D>reboot
15. Do not save the configuration as you will not use it in later labs.
Note that the IRF configuration is not in the config file. Once the IRF parameters
are set, they stay on the device no matter what config file is used.
Rev. 11.12 L8.1 –11

Command reference
Change the default IRF member ID (1) irf member 1 renumber <member ID>
to a new ID.
Configure the IRF priority. irf member <member ID> priority <value>
Save the configuration. save [safely]

shutdown
Configure the IRF virtual port. irf-port <member ID>/<peer member ID>
y
Add a port to the IRF virtual port. port group interface <type> <number>
nl
O
no shutdown
Se
Create a link aggregation interface. interface bridge-aggregation <group ID>
Set a link aggregation interface to interface bridge-aggregation <group ID>

lU
dynamic mode (LACP). link-aggregation mode dynamic
Assign a physical interface to the link interface <type> <number>
a
aggregation group. port link-aggregation group <group ID>

rn
Configure a link aggregation as a interface bridge-aggregation <group ID>

VLAN trunking port. port-link-type trunk
te
In
VLAN.
P
View IRF settings. display irf [topology | configuration]

H

r
Fo

startup-config.

named file.
config.
L8.1 –12 Rev. 11.12

members of VLAN.
of a VLAN.
Create a static link aggregation trunk <port ID list> trk<ID> trunk
group and assign physical ports to it.
Create an LACP link aggregation trunk <port ID list> trk<ID> lacp
group and assign physical ports to it.
Configure a link aggregation group vlan <ID> untagged trk<ID>
(trunk) as an untagged member of a
VLAN.
Configure a link aggregation group vlan <ID> tagged trk<ID>
(trunk) as a tagged member of a
VLAN.
y
Enable ports. interface <port ID list> enable
nl
Disable ports. interface <port ID list> disable
O
Set the configuration file for the startup-default config interop2a
startup-config.
Se
lU
a
rn
Cisco Commands
te
Create a link aggregation interface interface Port-channel <port_channel_ID>

In
Statically assign a physical interface interface <port_type> <port_ID>

P
to the link aggregation group in LACP channel-group <port_channel_ID> mode active

mode.
H
Configure a link aggregation as a interface Port-channel <port_channel_ID>

VLAN trunking port (which by default switchport trunk encapsulation dot1q
r
Fo
permits all VLANs and uses VLAN 1 switchport mode trunk

as the native VLAN).
no shutdown
shutdown
Rev. 11.12 L8.1 –13



configuration file.
startup.
Reboot. reload
y
nl
O
Se
a lU
rn
te
In
P
r H
Fo
L8.1 –14 Rev. 11.12

Configuring VRRP
Objectives
This lab is optional. Your instructor will determine whether you have time to complete
it.
 Configure Virtual Router Redundancy Protocol (VRRP) on HP A-Series switches
 Migrate access layer switches from Cisco aggregation layer switches (in this lab,
called distribution switches) to HP distribution switches
y
nl
 Migrate the PCs from using the HSRP virtual IP address for their default router to
using the VRRP virtual IP address
O
Lab equipment
Se
lU
MSTP Region
Name: HP-Cisco
Revision: 1
a

rn

te
In
Cisco-A Cisco-B
HSRP IP addressing:
P1 P1
P
10.POD.VLAN.X/24
X=1 on Cisco-A
H
P3 P4 P3 P4 X=2 on Cisco-B
Trunks X=3 on HP-C
r
VLANs1, 11,
X=4 on HP-D
Fo
12, 13
X=5 on HP-E
P1 P2 P1 P2 X=6 on HP-F
X=100 on Server_1
X=DHCP on Client_1
P3 HP-E P3 HP-F
Edge Edge
VLAN 1 VLAN 12
Server_1 Client_1
Figure 9-1: Virtual IP—Initial topology
Figure 9-1 displays the initial step for this lab.

From this set up, you will migrate to the topology displayed in Figure 9-2, which
shows the final step in the migration.
Rev. 11.12 L9.1 –1

MSTP Region
Name: HP-Cisco
Revision: 1
Cisco-A Cisco-B HP-C HP-D

HSRP VRRP
P1 P1 XP1 XP1
P1
P3 P3 P4 P2 P3 P2 P3
IP addressing: Trunks
10.POD.VLAN.X/24 VLANs 1, 11, 12, 13
X=1 on Cisco-A P1 P2
X=2 on Cisco-B P2 P1
y
X=3 on HP-C HP-E HP-F
nl
X=4 on HP-D
X=5 on HP-E P3 P3
O
X=6 on HP-F
X=100 on Server_1
Se
X=DHCP on Client_1
lU Server_1 Client_1
Figure 9-2: Virtual IP—Final step
In other words, from an initial network in which Cisco-A and Cisco-B act as
a
distribution routing switches implementing HSRP, you will move to a final

rn
network, in which HP-C and HP-D act as the new distribution routing switches
te
implementing VRPP.
In
Devices
P
 Two Cisco 3750 switches , Cisco-A and Cisco-B, acting as initial distribution
H
routing switches
Two HP A-Series A5800 switches, HP-C and HP-D, acting as final distribution
r

Fo
routing switches
 Two HP E-Series 3500 switches, HP-E and HP-F, acting as the edge switches
 Server_1 and Client_1
Cabling
The exact cabling for this lab will be explained in next steps and shown in the
accompanying figures.
L9.1 –2 Rev. 11.12

Configuring VRRP
Lab steps
Setup of the initial LAN
MSTP Region
Name: HP-Cisco
Revision: 1
Cisco-A Cisco-B
HSRP IP addressing:
P1 P1
10.POD.VLAN.X/24
X=1 on Cisco-A
y
P3 P4 P3 P4 X=2 on Cisco-B
nl
Trunks X=3 on HP-C
VLANs1, 11,
O
X=4 on HP-D
12, 13
X=5 on HP-E
P1 P2 P1 P2 X=6 on HP-F
Se
X=100 on Server_1
X=DHCP on Client_1
P3 HP-E HP-F
lU
P3
Edge Edge
VLAN 1 VLAN 12
a
Server_1 Client_1
rn
Figure 9-3: Virtual IP step 1

te
1. Load the interop5a configuration from Lab 5.1 on Cisco-A, Cisco-B, and HP-E.
In

P

H

r
Fo
Cisco-A# show boot

Cisco-A# reload

HP-E# reload
2. Reset HP-F to factory-default settings.

HP-F# erase startup
HP-F# reload
Rev. 11.12 L9.1 –3

3. To configure HP-F, you will copy HP-E’s configuration to it. Copy and paste HP-
E’s configuration into a text editor. The make these alterations to the file:
 Change the hostname to HP-F
 Change the IP address VLAN 1 to HP-F’s address (10.POD.1.6/24)
4. Paste the content into your CLI session with HP-F. Save the configuration.
5. On HP-E and HP-F, change the default gateway to 10.POD.1.254 (the virtual IP
address that you will configure for HSRP).
HP-E(config)# ip default-gateway 10.1.1.254
HP-F(config)# ip default-gateway 10.1.1.254
6. Establish the physical connections as shown in Figure 9-3.

 Connect Server_1 to P3 on HP-E in VLAN 1.
y
nl
 Connect Client_1 to P3 on HP-F.
O
7. Configure port P3 in VLAN 12 on HP-F as untagged in VLAN 12:
Se
HP-F(config)# vlan 12 untagged 3
8. On Cisco-A and Cisco-B, make sure the MSTP priority is defined as follows:
lU
Cisco-A(config)#spanning-tree mst 0-1 priority 0
Cisco-A(config)#spanning-tree mst 2 priority 4096
a
rn
Cisco-B(config)#spanning-tree mst 0-1 priority 4096

te
Cisco-B(config)#spanning-tree mst 2 priority 0

In
Later you will set the MSPT priority on the HP distribution switches as 8192 and
16384 in the migration phase.
P
Configure HSRP on Cisco routing switches

r H
9. On Cisco-A and B, complete these tasks:

Fo
a. Enable IP routing
b. Make sure that you have defined these IP addresses in VLAN 12:
 Cisco-A: 10.POD.12.1/24
 Cisco-B: 10.POD.12.2/24
c. Change the IP helper address for DHCP relay in VLAN 12 (you do not need
to change the address in VLAN 1 because the DHCP server is in VLAN 1).
 DHCP server: 10.POD.1.100 (Server_1)
d. Enable HSRP on Cisco-A and Cisco-B in VLAN 1 and VLAN 12:
 Virtual IP: 10.POD.VLAN.254
 Master: Root in that VLAN
L9.1 –4 Rev. 11.12

Configuring VRRP
 Backup: Secondary root in that VLAN

 Standby ID= VLAN ID
On Cisco-A (master in VLAN 12, backup in VLAN 1), enter:
Cisco-A(config)#ip routing
Cisco-A(config-if)#interface vlan 1
Cisco-A(config-if)#ip add 10.1.1.1 255.255.255.0
Cisco-A(config-if)#standby 1 ip 10.1.1.254
Cisco-A(config-if)#standby 1 priority 100
Cisco-A(config-if)#interface vlan 12
y
Cisco-A(config-if)#ip add 10.1.12.1 255.255.255.0
nl
Cisco-B(config-if)#ip helper-address 10.1.1.100
O
Cisco-A(config-if)#standby 1 ip 10.1.12.254
Se
Cisco-A(config-if)#standby 1 preempt
Cisco-A(config-if)#standby 1 priority 255
lU
On Cisco-B (master in VLAN 1, backup in VLAN 12), enter:
a
rn
Cisco-B(config)#ip routing
te
Cisco-B(config-if)#interface vlan 1
In
Cisco-B(config-if)#ip add 10.1.1.2 255.255.255.0

P
Cisco-B(config-if)#standby 1 ip 10.1.12.254
H
Cisco-B(config-if)#standby 1 preempt
Cisco-B(config-if)#standby 1 priority 255
r
Fo
Cisco-B(config-if)#interface vlan 12
Cisco-B(config-if)#ip add 10.1.12.2 255.255.255.0
Cisco-B(config-if)#ip helper-address 10.1.1.100
Cisco-B(config-if)#standby 12 ip 10.1.12.254
Cisco-B(config-if)#standby 12 priority 100
10. Verify that HSRP is active:

Cisco-B#show standby brief
Configure DHCP
11. Server_1 (the Windows Server 2008) is connected to P3 on HP-E in VLAN 1. Its
IP address is 10.POD.1.100/24. On Server_1, change the default gateway to
10.POD.1.254 (the virtual IP address used by HSRP).
Rev. 11.12 L9.1 –5
12. Verify that Server_1 can do the following:

 Ping its default gateway: 10.POD.1.254
 Ping 10.POD.12.1
If Server_1 can ping these addresses, IP routing is working.
13. On Server_1, the Windows Server 2008, define a DHCP scope for VLAN 12:
 Name : VLAN 12
 Start IP address: 10.POD.12.102
 End IP address: 10.POD.12.199
 Mask length: 24
 Lease duration: 10 minutes
y
nl
 Default gateway: 10.POD.12.254
O
a. Start the DHCP server by clicking Start -> Administrative Tools -> DHCP.
b. Right-click the server name and select All Tasks > Start if the server is not
Se
already started.
a lU
rn
te
In
P
r H
Fo
Figure 9-4: Windows Server 2008 > DHCP window
c. Expand the server’s name. You will see IPv4 and IPv6 folders.
d. If IPv4 does not show a green sign, which indicates that it is started, you
need to authorize the server. Right-click the server name and select
Authorize, as shown below.
L9.1 –6 Rev. 11.12

Configuring VRRP
y
nl
O
Figure 9-5: Windows Server 2008 > DHCP > Authorize
e.
Se
To create a scope, right-click IPv4 and select New Scope.
a lU
rn
te
In
P
r H
Fo
Figure 9-6: Windows Server 2008 > DHCP > New Scope
The DHCP Scope creation wizard starts.

f. Follow the steps to create a scope for VLAN 12. Use these parameters:
 Name : VLAN 12
 Start IP address: 10.POD.12.102
 End IP address: 10.POD.12.199
 Mask length: 24
Rev. 11.12 L9.1 –7

 Lease duration: 10 minutes

 Default gateway: 10.POD.12.254
y
nl
O
Se
lU
Figure 9-7: Windows Server 2008 > DHCP > New Scope Wizard > IP Address Range window
a
g. Complete the wizard.

rn
14. On Client_1, configure its Ethernet NIC to obtain an IP address using DHCP.
te
15. Client_1 is connected to P3 on HP-F in VLAN 12. Verify that Client_1 has
In
obtained an IP address from scope VLAN 12.

a. On Client_1 in the command prompt, enter ipconfig /all to verify the DHCP
P
address. Also verify that the obtained lease time is equal to 10 minutes.
H
b. Verify that Client_1 can ping Server_1.

r
Fo
L9.1 –8 Rev. 11.12

Configuring VRRP
VRRP configuration on HP routing switches

MSTP Region
Name: HP-Cisco
Revision: 1
Cisco-A HP-C VRRP HP-D

P2 P1 XP1 XP1 IP addressing:
10.POD.VLAN.X/24
P2 P3 P2 P3 X=1 on Cisco-A
X=2 on Cisco-B
Trunks X=3 on HP-C
VLANs1, 11, 12, 13
X=4 on HP-D
P1 P2 P1 P2 X=5 on HP-E
X=6 on HP-F
y
HP-E HP-F
X=100 on Server_1
nl
P3 P3 X=DHCP on Client_1
O
Server_1 Client_1
Se
Figure 9- 8: Virtual IP step 2
lU
16. Configure HP-C and HP-D as the new distribution switches for your lab. They will
implement IP routing with VRRP. They will be the new default gateway (virtual IP
a
address 10.POD.1.253) in VLANs 1 and 12.

rn
For now, you will connect these switches to the existing network in order to
te
maintain the Layer 2 continuity (VLAN). However, you will set up the uplinks that
will connect to the access layer switches in a later migration step.
In
17. Load the interop5a configuration from Lab 5.1 on HP-C and HP-D.
P
<HP> display startup

H
<HP> startup saved interop-5a.cfg

r
<HP> reboot
Fo
18. Connect HP-C and HP-D as shown on Figure 9-4.

 Connect XP1 (10 Gigabit interface) on HP-C to XP1 on HP-D.
 Connect P1 on HP-C to P2 on Cisco-A.
 Do not connect HP-C and HP-E’s P2 and P3 ports. You will connect these
ports later.
19. Verify that P1, P2, P3, and XP1 are up. Then configure these ports as trunk ports
(if they are not so already).
[HP]display port trunk
[HP]interface GigabitEthernet1/0/1
[HP-GigabitEthernet1/0/1] port link-type trunk
[HP-GigabitEthernet1/0/1] port trunk permit vlan all
Rev. 11.12 L9.1 –9

Note
As always, specify the interface IDs for your environment based on your Port
Mapping table. Remember to configure each port that is not already a trunk.
20. Change MSTP priorities on HP-C and HP-D to prepare them to be root and
secondary root when you disconnect them from the original network.
[HP-D]stp instance 0 priority 16384

y
nl
21. On HP-C and HP-D, configure IP and VRRP settings in VLANs 1 and 12:
O
a. Enable IP routing (routing is enabled by default).
b. Define IP address in VLAN 12
 HP-C: 10.POD.12.3/24
Se
lU
 HP-D: 10.POD.12.4/24
a
c. Enable VRRP on HP-C and HP-D in VLAN 1 and VLAN 12:

rn
 Virtual IP: 10.POD.VLAN.253

te
 Master: future root in VLAN

In
 Backup: future secondary root in VLAN

VRRP ID = VLAN ID
P

H
On HP-C (master in VLAN 12, backup in VLAN 1), enter:

r
Fo

[HP-C-Vlan-interface12] vrrp vrid 12 priority 254
On HP-D (master in VLAN 1, backup in VLAN 12), enter:

[HP-D-Vlan-interface1] ip address 10.1.1.4 24
[HP-D-Vlan-interface1]vrrp vrid 1 virtual-ip 10.1.1.253
L9.1 –10 Rev. 11.12

Configuring VRRP
[HP-D-Vlan-interface12] ip address 10.1.12.4 24
Note
By default, preempt mode is enabled, so this command is not shown. The default
VRRP priority is 100.
22. If HP-C is providing DHCP services, remove the pools for VLANs 1 and 12.
[HP-C] undo dhcp-server ip-pool vlan1-pool
y
[HP-C] undo dhcp-server ip-pool vlan12-pool
nl
23. On both HP-C and HP-D, configure DHCP relay on VLAN 1 and 12 interfaces.
O
Use this DHCP server address: 10.POD.1.100.
Se
[HP] dhcp enable
[HP] dhcp relay server-group 1 ip 10.1.1.100
lU
[HP] interface vlan-interface 1
a
[HP-Vlan-interface11] dhcp select relay

rn
[HP-Vlan-interface11] dhcp relay server-select 1

te
In
[HP] interface vlan-interface 12

[HP-Vlan-interface11] dhcp select relay
P
[HP-Vlan-interface11] dhcp relay server-select 1

H
24. Determine HP-C’s and HP-D’s root ports in MSTP instances 0, 1, and 2.
r
Fo
Instance 0: ___________________________________________________________
Instance 1: ___________________________________________________________
Instance 2: ___________________________________________________________
25. Verify that HP-C and HP-D can ping these IP addresses:
 HP-E and HP-F
 Cisco-A and Cisco-B in vlan 1 and VLAN 12
 Server_1 and Client_1
Rev. 11.12 L9.1 –11

Note
Refer to Figure 9-1 to find the IP addresses.
HP-C and HP-D are now ready to be connected to the access layer switches.
Migration of the access layer switches

MSTP Region
Name: HP-Cisco
Revision: 1

HSRP VRRP
P1 P1 XP1 XP1
P1
P4 P3 P4 P3 IP addressing:
y
P3 P2 P2 P3 10.POD.VLAN.X/24
P2
nl
Trunks X=1 on Cisco-A
VLANs 1, 11, X=2 on Cisco-B
O
12, 13 P1 P2 X=3 on HP-C
P1 P2 P1 P2 P2 P1 X=4 on HP-D
X=5 on HP-E
Se
HP-E P3 HP-E X=6 on HP-F
P3 P3 HP-F P3 HP-F
X=100 on Server_1
X=DHCP on Client_1
lU
Server_1 Client_1 Server_1 Client_1
a

rn
In this task, you will migrate the edge to the new distribution switches:
te
Move uplinks from the Cisco distribution routing switches to the HP distribution
In
routing switches.
P
 Use the DHCP scope to alter PCs’ default gateway from the IP address used by
H
HSRP to the IP address used by VRRP.

r
Figure 9-6 illustrates this step and the final topology.

Fo
L9.1 –12 Rev. 11.12

Configuring VRRP
MSTP Region
Name: HP-Cisco
Revision: 1

HSRP VRRP
P1 P1 XP1 XP1
P1
P3 P4 P2 P3 P2 P3
P3
10.POD.VLAN.X/24 VLANs 1, 11, 12, 13
X=1 on Cisco-A P1 P2
X=4 on HP-D
X=5 on HP-E P3 P3
y
X=6 on HP-F
nl
X=100 on Server_1
X=DHCP on Client_1 Server_1 Client_1
O
Se
26. To evaluate the downtime that a user would experience during the migration,
lU
start a continuous ping from Client_1 to Server_1:
C:> ping –t 10.1.1.100
a
27. First, move HP-E’s uplinks from the Cisco routing switches to the HP routing
rn
switches.
te
a. Move the cable connected to P2 on HP-E:

In
 From P3 on Cisco-B
P
 To P2 on HP-D
H
b. On HP-E, verify P2’s STP status.

r
_____________________________________________________________________
Fo
c. Move the cable connected to P1 of HP-E:

 From P3 on Cisco-A
 To P2 on HP-C
d. On HP-E, verify P1’s STP status.
_____________________________________________________________________
e. What is the failover delay?

_____________________________________________________________________
Rev. 11.12 L9.1 –13

28. Now move HP-F’s uplinks.

a. Move the cable connected to P2 on HP-F:
 From P4 on Cisco-B
 To P3 on HP-D
b. On HP-F, verify P2’s STP status.
_____________________________________________________________________
c. Move the cable connected to P1 on HP-F:

 From P4 on Cisco-A
 To P3 on HP-C
y
d. On HP-F, verify P1’s STP status.
nl
_____________________________________________________________________
O
Se
e. What is the failover delay?
_____________________________________________________________________
a lU
29. Now you must change the default gateway IP addresses on Server_1 and
rn
Client_1:
te
a. First change the default gateway of Server_1 from 10.POD.1.254 to

10.POD.1.253.
In
b. Now change the default gateway setting in the DHCP server’s scope for
P
VLAN 12.
H
 Former setting: Virtual IP of HSRP (10.POD.12.254)

r
 New setting: Virtual IP in VRRP (10.POD.12.253)

Fo
Follow these steps:

1) On Server_1, open the DHCP server.
2) Expand the server name, IPv4, and VLAN 12 scope folders.
L9.1 –14 Rev. 11.12

Configuring VRRP
y
Figure 9-11: Windows Server 2008 > DHCP > <Server> > IPv4 > <VLAN 12 scope> Scope Options
nl
O
3) Right-click the Scope Options folder and chose to edit the options.
4) Select the Router option and remove 10.POD.12.254.
5)
Se
For IP address, type 10.POD.12.253. Click Add.
a lU
rn
te
In
P
r H
Fo
Figure 9-12: Windows Server 2008 > DHCP > Scope Options window
6) Click OK.
c. On Client_1, either wait for end of lease duration or trigger an IP address
change by entering ipconfig /renew in command prompt.
 What is the failover delay?
_____________________________________________________________________
30. Now you can disconnect port P2 on HP-C from P3 on Cisco-A.
Rev. 11.12 L9.1 –15

31. Verify Server_1 and Client_1 can still communicate.

You have successes in moving the access layer switches and connected devices to the
new HP distribution switches.
MSTP Region
Name: HP-Cisco
Revision: 1

HSRP VRRP
P1 P1 XP1 XP1
P1
P3 P3 P4 P2 P3 P2 P3
10.POD.VLAN.X/24 VLANs 1, 11, 12, 13
X=1 on Cisco-A
y
P1 P2
nl
X=4 on HP-D
O
X=5 on HP-E P3 P3
X=6 on HP-F
X=100 on Server_1
Se
X=DHCP on Client_1 Server_1 Client_1
Figure 9-13: Virtual IP final topology

lU
To complete such a migration in a real-world environment, what other steps and
a
recommendations would you propose to manage the migration safely?

rn
_____________________________________________________________________
te
In
_____________________________________________________________________
P
_____________________________________________________________________
r H
_____________________________________________________________________
Fo
_____________________________________________________________________
_____________________________________________________________________
_____________________________________________________________________
_____________________________________________________________________
_____________________________________________________________________
L9.1 –16 Rev. 11.12

Configuring VRRP
On Cisco switches:
Cisco-A# dir flash:
Cisco-A# show boot
y
<HP-C> dir /all
nl
O
Se
lU
HP-E# write mem
a
rn
te

In

P
r H
Fo
Rev. 11.12 L9.1 –17

Command reference
VLANs.
Configure ports as tagged members of vlan <ID> tagged <port ID list>
VLANs.
Assign an IP address to a VLAN interface. vlan <ID> ip address <IP address subnet
mask | IP address/prefix length]
config.
y
Copy a saved configuration to a new copy config <source filename> config
nl
configuration file. <destination filename>
O
Se
lU
a
rn
te
Remove a DHCP pool. undo dhcp server ip-pool <ID>

In
Configure a DHCP server group for DHCP dhcp relay server-group <ID> ip <DHCP server IP
relay. address>
P
Enable DHCP relay on a VLAN interface interface vlan-interface <ID>

H
and specify the server group dhcp select relay

dhcp relay server-select <ID>
r
Configure the switch priority for an MSTP stp instance <ID> priority <priority>
Fo
instance.
Configure the switch as the secondary root stp instance <ID> root secondary
for an MSTP instance.
Assign an IP address to a VLAN interface. interface vlan-interface <ID>
Create a VRRP group on a VLAN interface interface vlan-interface <ID>
and set the virtual IP address. vrrp vrid <ID> virtual-ip <IP address>
Enable preemption (from the VLAN vrrp vrid <ID> preempt-mode [timer delay <seconds>]
interface view).
Assign the switch a priority for the vrrp vrid <ID> priority <value>
VRRP group (from the VLAN
interface view).
L9.1 –18 Rev. 11.12

Configuring VRRP

config.

file.
Cisco Commands
instance.
y
Enable routing. ip routing
nl
Configure an IP address on a VLAN. interface vlan <VLAN_ID>
O
Configure DHCP relay (a helper address) on interface vlan <VLAN_ID>
Se
a VLAN. ip helper-address <DHCP server IP address>
Enable HSRP on a VLAN and set the virtual interface vlan <ID>
IP address. standby <group number> ip <virtual IP address>
lU
Set the HSRP priority for the VLAN. standby <group number> priority <priority>
a
Configure HSRP preempt mode on standby <group number> preempt

rn
the VLAN.
te
View HSRP status. show standby brief

In

P

H

r
Fo

configuration file.
Rev. 11.12 L9.1 –19

y
nl
O
Se
lU
a
rn
te
In
P
r H
Fo
L9.1 –20 Rev. 11.12

Configuring OSPF Areas
Module 10 Lab 1
Objectives
 Define an OSPF area
 Configure router summarization for OSPF areas
Lab equipment
y
Server_1
nl
P3
VLAN 101
O
HP-E
P1
VLAN 100 Area 1
Se
P3
Cisco-B OSPF Router-Id:
POD.X.X.X
lU
VLAN 2 P1 P2
VLAN 3
IP addressing:
P1 P1
a
HP-C Area 0 Cisco-A 10.POD.VLAN.X/24

rn
X=2 on Cisco-B
X=3 on HP-C
te
VLAN 4 VLAN 5
P1 P2 X=4 on HP-D
X=5 on HP-E
In
HP-D X=6 on HP-F

X=100 on Server_1
P3 X=101 on Client_1
VLAN 200
P
P1 Area 2
H
HP-F P3
Client_1
VLAN 201
r
Fo
Figure 10.1-1: Configuring OSPF areas
diagram above.
 Devices:
 Two Cisco 3750 switches (Cisco-A and Cisco-B)
 Two HP A5800 switches (HP-C and HP-D)
 Two HP-E3500 switches (HP-E and HP-F)
Rev. 11.12 L10.1 –1

 Cabling:
 Connections between the switches as shown in the Figure 10.1-1
 One connection in VLAN 101 between Server_1 and HP-E
 One connection in VLAN 201 between Client_1 and HP-F
Important
! Do not establish the connections yet. The lab will indicate when you should do
so.
Lab steps
Complete the tasks in the sections below. As you complete the lab, record any
display or show commands that provide you with interesting information or that help
y
you to verify configurations and status. In particular, record show or display
nl
commands that best display the following information:
O
 OSPF router-ID
Se
 OSPF interfaces and their respective neighbors
OSPF neighbors
lU

 OSPF routes and their advertising routers

a
OSPF link state advertisements of various types along with their costs
rn
Initial setup
te
In
1. Reset every device to its factory default configuration.

2. Then configure these settings:
P
 Set the hostname (use the ones in the Figure 10.1-1).

H
 Enable LLDP.
r
Fo
 Allow Telnet enabled/privileged level access without authentication.

3. On Cisco-A, Cisco-B, HP-C, HP-D, HP-E, and HP-F create VLANs and IP
addresses.
Note
In order to save time, your instructor might provide you with a configuration file
in text format, which you can copy and paste into your switches CLI. Ask your
instructor if he or she intends to provide this configuration.
a. Create the VLANs as specified on Figure 10.1-1.

b. Configure the ports as access ports in the proper VLANs indicated in the
figure.
c. Enable IP routing.
L10.1 –2 Rev. 11.12

d. Define IP address on corresponding on Interface VLAN

 Use this scheme:
10.POD.VLAN.X/24
Replace POD with the number of your group. Replace VLAN with the
VLAN ID. Replace X depending on the device as follows:
X=1 on Cisco-A
X=2 on Cisco-B
X=3 on HP-C
X=4 on HP-D
X=5 on HP-E
y
X=6 on HP-F
nl
e. Disable STP either globally or on the physical interfaces.
O
4. Verify connectivity with ping commands.
Se
Configure OSPF areas and interfaces
lU
5. On each device, complete these steps:
a. Enable OSPF
a
rn
b. Set a router ID using the following format: Router-ID=POD.X.X.X.

te
Replace POD with the number of your group. Replace X with the device’s
number as you did for the IP address.
In
For example, Cisco-A in POD #2 has router ID, 2.1.1.1.

P
c. Define OSPF IP interfaces in the correct area as shown in Figure 10.1-1.

H
On Cisco-A, enter:
r
Fo
Cisco-A(config)# router ospf 1

Cisco-A(config-router)# router-id POD.1.1.1
Cisco-A(config-router)# network 10.0.0.0 0.255.255.255 area
0
On Cisco-B, enter:
Cisco-B(config)# router ospf 1
Cisco-B(config-router)# router-id POD.2.2.2
Cisco-B(config-router)# network 10.POD.2.2 0.0.0.0 area 0
Rev. 11.12 L10.1 –3

On HP-C, enter:
[HP-C] ospf 1 router-id POD.3.3.3
[HP-C-ospf-1] area 0
[HP-C-ospf-1-area-0.0.0.0] network 10.0.0.0 0.255.255.255
On HP-D, enter:
[HP-C-ospf-1-area-0.0.0.0] network 10.POD.4.4 0.0.0.0
[HP-C-ospf-1-area-0.0.0.0] area 2
y
On HP-E, enter:
nl
HP-E(config)# ip router-id POD.5.5.5
O
HP-E(ospf)# router ospf
Se
HP-E(ospf)# area 1
lU
HP-E(config-vlan)# ip ospf area 1
a
HP-E(config-vlan)# vlan 101

rn

te
On HP-F, enter:
In
HP-F(config)# ip router-id POD.6.6.6

P
HP-F(config)# router ospf

H
HP-F(ospf)# area 2
r
Fo
HP-F(config)# vlan 200

HP-F(config-vlan)# ip ospf area 2
HP-F(config-vlan)# vlan 201
6. On HP-E, configure VLAN 101 interface as a passive interface.

HP-F(vlan-101)# ip ospf passive
7. On HP-F, configure the VLAN 201 interface as a passive interface.

HP-F(vlan-201)# ip ospf passive
L10.1 –4 Rev. 11.12

8. Record the show and display commands you use to:

 List OSPF interfaces.
 List OSPF neighbors
 List OSPF learned Networks
On Cisco:
_____________________________________________________________________
_____________________________________________________________________
_____________________________________________________________________
y
nl
_____________________________________________________________________
O
On HP A-Series:
Se
_____________________________________________________________________
lU
_____________________________________________________________________
a
rn
_____________________________________________________________________
te
In
_____________________________________________________________________
P
On HP E-Series:
H
_____________________________________________________________________
r
Fo
_____________________________________________________________________
_____________________________________________________________________
_____________________________________________________________________
Rev. 11.12 L10.1 –5

Configure area summarization

9. You will now configure area summarizations on the ABRs:
 Cisco-B
 Summarizes area 0 to advertise in area 1
 Summarizes area 1 to advertise in area 0
 HP-D
 Summarizes area 0 to advertise in Area 2
 Summarizes area 2 to advertise in Area 0
10. For each summary, attempt to include the smallest range of subnets that still
includes all subnets in the area.
y
nl
Use these guidelines:
O
 You can summarize contiguous /24 subnets in multiples of two and in
multiples of powers of two. For example, you can summarize two /24
Se
subnets as one /23 subnet. You can summarize four /24 subnets as one
/22 subnet.
lU
 In your area, determine the number of continuous /24 IP subnets. Round the
number up to the nearest power of 2 (2, 4, 8, 16, and so forth).
a
rn
 Find the first /24 subnet in the summary for this range.
te
Remember that first /24 subnet in the summary has, as its third octet, a
multiple of the power of two with which you are dealing. For example, if
In
you are trying to summarize eight /24 subnets, the first /24 subnet has a
multiple of 8 for its third octet. Therefore, the first /24 subnet in the
P
summary might be different from the first in your range. Determine whether
H
you need to summarize more networks to include all your contiguous

r
subnets. Then determine the correct subnet mask for the summary.
Fo
Note
As you see, it is important to plan your IP addressing carefully to make the most
efficient summaries.
Record your summaries:

Area 0 summary= 10.POD._._ /_ _
11. On Cisco-B, configure area summarization for area 0 and area 1:
Cisco-B(config)#router ospf 1
Cisco-B(config-router)#area 0 range 10.POD.0.0 255.255.248.0
Cisco-B(config-router)#area 1 range 10.POD.100.0 255.255.252.0
L10.1 –6 Rev. 11.12
12. On HP-D, configure area summarization for area 0 and area 2

[HP-D]ospf 1
[HP-D-ospf-1]area 0
[HP-D-ospf-1-area-0.0.0.0]abr-summary 10.POD.0.0 21
[HP-D-ospf-1-area-0.0.0.0]area 2
[HP-D-ospf-1-area-0.0.0.2]abr-summary 10.POD.200.0 23
13. How do you verify that Cisco-B and HP-D are summarizing the areas correctly?
What command would you enter?
_____________________________________________________________________
y
On which devices would you enter the command?
nl
O
_____________________________________________________________________
What information would you look for?

Se
lU
_____________________________________________________________________
a
rn
14. Enter this command on HP-E:

te
HP-E#show ip route ospf

In
Do you see the summary?

P
_____________________________________________________________________
r H
Fo
Why is it useful to look for the summary of area 0 on HP-E?
_____________________________________________________________________
Can you see individual networks in area 0 and area 2 in HP-E’s routing table?
_____________________________________________________________________
15. Enter the same command on HP-F:

HP-F#show ip route ospf
Rev. 11.12 L10.1 –7

Do you see the summary?
_____________________________________________________________________
Can you see individual networks in area 0 and area 2 in HP-E’s routing table?
_____________________________________________________________________
Configure a totally stubby area and NSSA

You will now configure totally stubby areas. Internal routers of those OSPF areas only
receive a default route instead of receiving inter-area summaries and external OSPF
y
routes. You might configure a branch office with a single connection to the main
nl
office as a totally stubby area.
O
16. On the ABR Cisco-B, define area 1 as a totally stubby area.
Se
Cisco-B(config-router)#area 1 stub no-summary
lU
17. On HP-E, define area 1 as a totally stubby area.
HP-E(ospf)# area 1 stub 20
a
Why do you not set the no-summary parameter on HP-E?

rn
_____________________________________________________________________
te
In
_____________________________________________________________________
P
H
18. On HP-E, verify that the ABR Cisco-B has generated and sent the default route.
_____________________________________________________________________
r
Fo
_____________________________________________________________________
19. If you do not see the default route, you may have to reconfigure OSPF on HP-E.
HP-E(config)# no router ospf
HP-E(config)# router ospf
HP-E(ospf)# area 1 stub 20
20. On the ABR HP-D, define area 2 as a totally stubby NSSA.

[HP-D]ospf 1
[HP-D-ospf-1]area 2
[HP-D-ospf-1-area-0.0.0.2]nssa no-summary
L10.1 –8 Rev. 11.12

21. On HP-F, set area 2 as an NSSA.

HP-F(ospf)# area 2 nssa 20
22. On HP-F can you see a default route generated by HP-D? Why?
_____________________________________________________________________
23. What command do you need to enter on HP-D to generate a default route into
NSSA area 2 only?
_____________________________________________________________________
y
_____________________________________________________________________
nl
O
Note
As a tip, try moving to the area 2 view on HP-D. Type nssa and use the help to
Se
check the command options.
lU
24. Disable OSPF on VLAN 201 on HP-F.
a
rn
HP-F(config-vlan)# no ip ospf
25. On HP-F, redistribute connected networks into OSPF.

te

In
HP-F(ospf)# redistribute connected

P
Can you see the external route to 10.POD.201.0/24 in Cisco-B’s routing table?
H
Why or why not?

r
_____________________________________________________________________
Fo
_____________________________________________________________________
Note
If during these steps, you have trouble, try to reset the OSPF processes. On HP A-
Series devices, enter reset ospf 1 process. On HP E-Series devices, enter clear ip
ospf.
26. Save the configuration of your devices for later use. Name the file interop-10a
and define this configuration as the startup-config.
Rev. 11.12 L10.1 –9

On Cisco switches:
Cisco-A# dir flash:
Cisco-A# show boot
<HP-C> dir /all
y
nl
O
Se
HP-E# write mem
lU
a

rn

te

In
P
r H
Fo
L10.1 –10 Rev. 11.12

Command reference
Reset to factory default settings. erase startup-config
VLANs.
Enable IP routing. ip routing
Enable OSPF and enter OSPF configuration router ospf
mode.
Set the OSPF router ID. ip router-id <router ID>
Enable (or disable) OSPF on a VLAN vlan <VLAN ID>
interface and assign the interface to an [no] ip ospf area <area ID>
y
area.
nl
Configure a passive OSPF interface. vlan <VLAN ID>
ip ospf passive
O
Define an area as a stub area or NSSA. router ospf
area <area ID> [stub | nssa] [no-summary]
Se
Redistribute connected routes into OSPF. router ospf redistribute connected
Show the route table. Optionally, show only show ip route [ospf]
lU
the OSPF routes.
View general information about OSPF. show ip ospf
View information about OSPF neighbors. show ip ospf neighbor
a
View the OSPF LSAs. show ip ospf link-state

rn

te
config.
In

P

r H
Fo

Reset to factory default settings. undo startup saved-configuration
or
reset saved-configuration [main | backup]
Create a VLAN. interface vlan-interface <ID>
Configure a port as an access port in a Interface <type> <number>

Assign an IP address to a VLAN interface. Interface vlan-interface <ID>
Rev. 11.12 L10.1 –11


Enable OSPF and set the router ID. ospf [process ID] router-id <router ID>
Define an area. area <area ID>
Enable OSPF on a network <network address>
network interface and <wildcard>
place the interface in this
area.
Configure summarization abr-summary <network address>
for an area. <mask | prefix length >
Define an area as a stub no-summary
totally stub area.
View the routing table. Optionally, view display ip routing-table [protocol ospf]
OSPF routes.
View general OSPF information. display ospf [process ID] brief
y
View information about OSPF neighbors. display ospf [process ID] peer
nl
O
View information about OSPF ABR and display ospf [process ID] abr-asbr
ASBR functions.
Se
View the OSPF database. display ospf [process ID] lsdb
lU
a
config.
rn

te

In
file.
P
r H
Cisco Commands
Fo

Reset to factory default settings. write erase
Create a VLAN. vlan <VLAN_ID>
Configure a port as an access port in a interface <type> <ID>

VLAN. switchport mode access
Assign an IP address to a VLAN interface. interface vlan <VLAN_ID>
L10.1 –12 Rev. 11.12


Enable OSPF. router ospf <process ID>
Set the router ID. router-id <ID>
Enable OSPF on a network network <network address> <wildcard bits>
interface and place the interface in area <ID>
this area.
Configure summarization for an area <ID> range <network address> <subnet
area. mask>
Define an area as a area <ID> stub no-summary
totally stub area.
View the routing table. Optionally, view show ip route [ospf]
only OSPF routes.
y
nl
View the OSPF database. show ip ospf database
O

Se
lU
a
rn

configuration file.
te
In
P
r H
Fo
Rev. 11.12 L10.1 –13

y
nl
O
Se
lU
a
rn
te
In
P
r H
Fo
L10.1 –14 Rev. 11.12

Configuring
OSPF Redistribution
Objectives
In this lab, you practice configuring more complicated OSPF scenarios on Cisco and
HP routers. It allows you to compare the configuration of redistribution and filtering
on Cisco and HP A-series and E-Series devices.
This lab is optional. Your instructor will determine whether you have time to complete
it.
y
nl
O
 Enable OSPF redistribution
Configure filters to control which routes are redistributed
Se

Lab equipment
lU
Server_1
a
P3
rn
VLAN 101
HP-E
te
P1
VLAN 100
In
P3
OSPF1 Area 0
Cisco-B
OSPF Router-Id:
POD.X.X.X
P
P1 P2
VLAN 2 VLAN 3
H
P1
IP addressing:
P1
HP-C Cisco-A 10.POD.VLAN.X/24
r
P2 X=1 on Cisco-A
P2
Fo
X=2 on Cisco-B
VLAN 4
X=3 on HP-C
VLAN 5 X=4 on HP-D
P1 P2
X=5 on HP-E
X=6 on HP-F
OSPF2 HP-D
Area 0 X=100 on Server_1
P3 X=101 on Client_1
VLAN 200 P1
HP-F P3
Client_1
VLAN 201
Figure 10.2-1: Configuring OSPF redistribution
diagram above.
Rev. 11.12 L10.2 –1


 Devices:
 Two Cisco 3750 switches (Cisco-A and Cisco-B)
 Two HP A5800 switches (HP-C and HP-D)
 Two HP-E3500 switches (HP-E and HP-F)
 Cabling—The cabling is identical to OSPF Lab 10.1 as shown in Figure 10.2-1.
Important
! Establish the connections now if you have not already done so.
Lab steps
y
nl
Complete the tasks in the sections below. As you complete the lab, record any
O
display or show commands that provide you with interesting information or that help
Se
you to verify configurations and status. In particular, record show and display
commands that best display the following information:
lU
 OSPF routes and the advertising routers
OSPF link state advertisements of various types and the associated costs
a

rn
Initial setup
te
1. The physical connections, VLANs, and IP addresses are identical to OSPF Lab
In
10.1.
2. If your devices are not running the Lab 10.1 configuration, load interop-10a now.
P
(Alternatively, your instructor might provide you this configuration to copy and
H
paste into your switches’ CLI.)

r
On Cisco switches:
Fo
Cisco-A# show boot

Cisco-A# reload
<HP-C> reboot
HP-E# reload
L10.2 –2 Rev. 11.12

Configuring OSPF redistribution
3. Once the switches are running the interop-10a configuration, verify the following:
 Interfaces are up.
 The switches have discovered their LLDP neighbors.
 IP interfaces are up, and each switch can ping its neighbors.
Set up OSPF
In this task, you will reconfigure OSPF for this lab:
 Remove the OSPF process on each switch.
 Reconfigure a single OSPF process on HP-D, HP-E, HP-F, and Cisco-B.
 Configure two OSPF processes on HP-C and Cisco-A, which act as ASBRs.

y
Assign IP interfaces in the correct OSPF processes and to area 0.
nl
 Verify that OSPF neighboring is established.
O
The precise steps follow.
Se
4. On all devices, remove the OSPF configuration.
lU
Cisco(config)# no router ospf 1
a

rn
[HP] undo ospf 1

te

In
HP(config)# no router ospf
5. In this network, HP-D, HP-F, Cisco-B, and HP-E are internal devices in area 0.
P
These switches run a single OSPF process.

H
 Configure all of their IP interfaces in area 0.

r
Fo
 Also configure their router IDs. Use this format: Router-ID=POD.X.X.X.

 Replace POD with the number of your group.
 X = node address
On Cisco-B, enter
Cisco-B(config-router)#router-id POD.2.2.2
Cisco-B(config-router)#network 10.0.0.0 0.255.255.255 area
0
On HP A-Series switch, HP-D, enter:

[HP-D]ospf 1 router-id POD.4.4.4
[HP-D-ospf-1] area 0
[HP-D-ospf-1-area-0.0.0.0] network 10.0.0.0 0.255.255.255
Rev. 11.12 L10.2 –3


HP-E(config)# ip router-id POD.5.5.5
HP-E(config)# router ospf
HP-E(ospf)# area 0

HP-E(config-vlan)# vlan 101
On HP E-Series switch, HP-F, enter:
HP-F(config)# ip router-id POD.6.6.6
y
nl
HP-F(ospf)# area 0
O
Se
lU
HP-F(config-vlan)#vlan 201
HP-F(config-vlan)#ip ospf area 0
a
6. HP-C and Cisco-A run two OSPF processes.

rn
 Associate VLANs with OSPF according to Figure 10.2-1. All VLANs are in
te
area 0.
In
 On Cisco-A:
 Interface VLAN 3 is in OSPF process 1.
P

H
 On HP-C:
r
Interface VLAN 2 is in OSPF process 1.

Fo

 In both OSPF process, use this format for the router ID: Router-
ID=POD.X.X.X.
On Cisco-A, enter:
Cisco-A(config-router)# network 10.POD.3.1 0.0.0.0 area 0

Cisco-A(config-router)# network 10.POD.5.1 0.0.0.0 area 0
L10.2 –4 Rev. 11.12

On HP-C, enter:

7. On every switch, verify the following:

 All interfaces are in area 0 and are up.
 OPSF neighboring has been established.
y
8. Check each router’s IP routing table.
nl
 Can you see routes to all IP subnets on HP-C and Cisco-A?
O
Se
___________________________________________________________________
lU
___________________________________________________________________
a
rn
 What routes can you see on HP-D? Why?

te
___________________________________________________________________
In
P
___________________________________________________________________
H
 What routes can you see on Cisco-B? Why?

r
Fo
___________________________________________________________________
___________________________________________________________________
9. Check the cost on all OPSF interfaces. Make sure that all interfaces are set with
the same cost. For example, set the cost to 1.
Configure OSPF redistribution

First you will configure mutual redistribution between the two OSPF processes in the
ASBRs without filtering.
Rev. 11.12 L10.2 –5

1. On HP-C and Cisco-A, redistribute routes from OSPF 1 to OSPF 2 and vice
versa. Configure redistribution with metric of 100. Metric-type is 2 by default.
On Cisco-A, enter:
Cisco-A(config-router)# redistribute ospf 2 subnets metric
100

Cisco-A(config-router)# redistribute ospf 1 subnets metric
100
On HP-C, enter:
[HP-C] ospf 1
y
[HP-C-ospf-1] import-route ospf 2 cost 100
nl
O
[HP-C] ospf 2
Se
[HP-C-ospf-2] import-route ospf 1 cost 100
2. Check the switches’ routing tables.

lU
On HP-D, can you see IP routes of all subnets?
a
rn
___________________________________________________________________
te
On HP-D, do you see IP routes of the OSPF 2 network as external networks?

In
P
___________________________________________________________________
H
On Cisco-B, are some routes of OSPF1 seen as external networks?

r
Fo
___________________________________________________________________
___________________________________________________________________
3. Shut down HP-C’s VLAN 2 port (the port that connects to Cisco-B).
Do you see a change in HP-C’s and Cisco-A’s routing tables?
___________________________________________________________________
4. Re-enable the port on HP-C.
L10.2 –6 Rev. 11.12

5. If this action did not cause a change, try disabling HP-C’s VLAN 4 port (the port
that connects to HP-D) and looking for a change. Then re-enable the port.
6. Explore disabling ports on Cisco-A in a similar manner.
7. What do you conclude?
___________________________________________________________________
___________________________________________________________________
___________________________________________________________________
___________________________________________________________________
y
nl
___________________________________________________________________
O
___________________________________________________________________
8.
Se
After you have finished experimenting, make sure that all Cisco-A and HP-C
lU
ports are up.
Change the administrative distance of external networks, tag

a
rn
imported networks, and filter the tagged networks

te
You will now implement one of the best practices about which you learned in the
In
module.
On HP-C and Cisco-A, you will tag networks imported from one process into another.
P
You will then filter the redistributed networks so that they are not redistributed back
H
into the original process.

r
You will configure tagging and filtering as follows:

Fo
 Tag routes imported from ospf 2 into ospf 1 with 22.

 Tag routes imported from ospf 1 into ospf 2 with 11.
 Filter routes marked with tag 11 from redistribution into OSPF 1.
 Filter routes marked with tag 22 from redistribution into OSPF 2.
You will also changing the preference or administrative distance for external
(redistributed) networks to 200.
Rev. 11.12 L10.2 –7

9. Configure the tagging, filtering, and administrative distance on the ABRs.

On Cisco-A, enter:
Cisco-A(config-router)# redistribute ospf 2 subnets tag 22
route-map filter_ospf1
Cisco-A(config-router)# distance ospf external 200

Cisco-A(config-router)# redistribute ospf 1 subnet tag 11
route-map filter_ospf2
Cisco-A(config-router)# distance ospf external 200
y
Cisco-A(config)# route-map filter_ospf1 deny 10
nl
Cisco-A(config-route-map)# match tag 11
O
Se
CiscoA(config)# route-map filter_ospf1 permit 20
CiscoA(config)# route-map filter_ospf2 deny 10
lU
Cisco-A(config-route-map)# match tag 22
a
CiscoA(config)# route-map filter_ospf2 permit 20

rn
On HP-C, enter:
te
[HP-C] ospf 1
In
[HP-C-ospf-1] import-route ospf 2 tag 22 route-policy

filter_ospf1
P
[HP-C-ospf-1] preference ase 200

r H
[HP-C] route-policy filter_ospf1 deny node 10

Fo
[HP-C-route-policy] if-match tag 11
[HP-C] route-policy filter_ospf1 permit node 20
[HP-C] ospf 2
[HP-C-ospf-2] import-route ospf 1 tag 11 route-policy
filter_ospf2
[HP-C-ospf-2] preference ase 200
[HP-C] route-policy filter_ospf2 deny node 10

[HP-C-route-policy] if-match tag 22
[HP-C] route-policy filter_ospf2 permit node 20

L10.2 –8 Rev. 11.12
10. Check the routing tables of HP-D and Cisco-B. Do you see external networks that
are part of their own OSPF systems?
___________________________________________________________________
___________________________________________________________________
11. On HP-C, disable the VLAN 2 interface. Do you observe the same effect on the
routing table as in previous task?
___________________________________________________________________
___________________________________________________________________
y
nl
12. Enable the VLAN 2 interface and disable the VLAN 4 interface. Do you observe
the same effect as in the previous task?
O
___________________________________________________________________
Se
___________________________________________________________________
a lU
13. On HP-C enable both the VLAN 2 and the VLAN 4 interface.
rn
14. On HP-F, start a traceroute to an IP address on HP-E, using an address in VLAN

te
201 as the source.

In
15. Shut down the VLAN 5 port on Cisco-A (the port that connects to HP-D).
16. Check HP-F’s routing table. What change do you observe?
P
H
___________________________________________________________________
r
Fo
17. Implement a traceroute on HP-E to HP-F, using an address in VLAN 101 as the
source. Observe the result.
___________________________________________________________________
___________________________________________________________________
___________________________________________________________________
___________________________________________________________________
Rev. 11.12 L10.2 –9

18. You have completed this lab. Because this is the last lab in the course, you do
not have to save the configuration (unless you want to save it for your own
purposes). If your facilitator asks you to, reset your switches to factory default
settings.
y
nl
O
Se
a lU
rn
te
In
P
r H
Fo
L10.2 –10 Rev. 11.12

Command reference
Enable (or disable) OSPF on a VLAN vlan <VLAN ID>
interface and assign the interface to an [no] ip ospf area <area ID>
area.
Implement a traceroute. traceroute
View the routing table. Optionally, view only show ip route [ospf]
the OSPF routes.
View the OSPF LSAs. show ip ospf link-state
Reset to factory default settings. erase startup-config
y
nl
O
Enable or disable an OSPF process. [undo] ospf <process ID>
Se
Define or remove an area. [undo] area <area ID>
Enable OSPF on a network <network address>
lU
network interface and <wildcard>
place the interface in this
a
area.
rn
Redistribute routes from another import-route ospf <process ID>-cost <metric>

OSPF process and set the metric type <1 | 2>
te
and metric type.

Set the preference for external preference ase <value>
In
routes.
Redistribute routes from another import-route ospf <process ID>-tag <tag ID>
P
OSPF process and set a tag.

H
View the routing table. Optionally, view display ip routing-table [protocol ospf]
OSPF routes.
r
Fo
View general OSPF information. display ospf [process ID] brief
View information about OSPF neighbors. display ospf [process ID] peer
View information about OSPF ABR and display ospf [process ID] abr-asbr
ASBR functions.
View the OSPF database. display ospf [process ID] lsdb
Create a route policy that denies all routes route-policy <name> deny node 10
with a specific tag and permits all others. if-match tag <ID>
route-policy <name> permit node 20
Redistribute routes from another OSPF ospf <process ID>
process and set a tag and route policy. import-route ospf <process ID>-tag <tag ID>
route-policy <name>
Shut down (or enable) a port. interface <type> <number>
[undo] shutdown
Rev. 11.12 L10.2 –11


View the routing table. show ip route
Reset to factory default settings. undo startup saved-configuration

or
reset saved-configuration [main | backup]
Cisco Commands
Enable or disable an OSPF process. [no] router ospf <process ID>
Set the router ID. router-id <ID>

Enable OSPF on a network network <network address> <wildcard bits>
interface and place the interface in area <ID>
y
this area.
nl
Redistribute routes from one OSPF redistribute ospf <process> subnets metric
process into this process.
O
Create a route policy that denies all routes route-map <mapname> deny 10
with a specific tag and permits all others. match tag <ID>
Se
route-map <mapname> permit 20
Redistribute routes from another OSPF router ospf <process ID>
lU
process and set a tag and route policy. redistribute ospf <process> subnets tag <tag ID>
route-map <map name>
View the routing table. Optionally, view show ip route [ospf]
a
only OSPF routes.

rn

te

In
View the OSPF database. show ip ospf database

P
H

r
Fo

configuration file.
Reset to factory default settings. write erase
L10.2 –12 Rev. 11.12

Switch Configurations
Appendix A
Lab 2.1
Cisco-A
conf t
!
hostname Cisco-A
!
y
lldp run
nl
!
O
!
interface Vlan1
Se
ip address 10.1.1.1 255.255.255.0
lU
!
!
a
line vty 0 4
rn
no login
te
privilege level 15
In
!
End
P
Cisco-B
H
conf t
r
Fo
!
hostname Cisco-B
!
lldp run
!
!
interface Vlan1
ip address 10.1.1.2 255.255.255.0
!
!
!
line vty 0 4
no login
Rev. 11.12 A–1
privilege level 15
end
HP-C
system-view
#
sysname HP-C
#
lldp enable
#
telnet server enable
y
#
nl
#
O
vlan 1
Se
#
#
lU
interface Vlan-interface1
ip address 10.1.1.3 255.255.255.0
a
#
rn
#
te
#
In
interface Ten-GigabitEthernet1/0/25
shutdown
P
#
H
r
Fo
shutdown
#
shutdown
#
shutdown
#
#
#
user-interface vty 0 15
authentication-mode none
A–2 Rev. 11.12
#
Return
HP-D
system-view
#
sysname HP-D
#
lldp enable
#
#
y
#
nl
vlan 1
O
#
Se
#
lU
ip address 10.1.1.4 255.255.255.0
#
a
#
rn
#
te
In
shutdown
#
P
H
shutdown
r
Fo
#
shutdown
#
shutdown
#
#
#
#
Rev. 11.12 A–3
Return
HP-E
configure
hostname "HP-E"
ip default-gateway 10.1.1.1
vlan 1
name "DEFAULT_VLAN"
untagged 1-24
y
ip address 10.1.1.5 255.255.255.0
nl
exit
O
Se
end
HP-F
lU
configure
a
rn
hostname "HP-F"
te
In
P
vlan 1
H
name "DEFAULT_VLAN"
r
untagged 1-24
Fo
ip address 10.1.1.6 255.255.255.0

exit
end
Lab 3.1
Cisco-A
conf t
!
hostname Cisco-A
!
lldp run
A–4 Rev. 11.12
!
!
Vlan 11
Vlan 12
Vlan 13
!
!
switchport trunk allowed vlan 1,11-13
!
y
nl
O
Se
!
lU
a
rn

te

!
In
P

H

r
Fo
!
!
interface Vlan1
ip address 10.1.1.1 255.255.255.0
!
!
!
line vty 0 4
no login
Rev. 11.12 A–5

privilege level 15
!
End
Cisco-B
conf t
!
hostname Cisco-B
!
lldp run
!
ip routing
y
!
nl
Vlan 11
O
Vlan 12
Se
Vlan 13
!
lU
!
a

rn

te

In
!
P

H

r
Fo

!
!
!
!
A–6 Rev. 11.12
!
interface Vlan1
ip address 10.1.1.2 255.255.255.0
!
!
!
line vty 0 4
no login
privilege level 15
end
HP-C
y
nl
system-view
O
#
Se
sysname HP-C
#
lU
dhcp server ip-pool vlan1
network 10.1.1.0 mask 255.255.255.0
a
gateway-list 10.1.1.1
rn
#
te

In
network 10.1.11.0 mask 255.255.255.0

P
#
H

r
Fo
network 10.1.12.0 mask 255.255.255.0

#
#
dhcp server forbidden-ip 10.1.1.1 10.1.1.101
dhcp server forbidden-ip 10.1.1.254
#
Rev. 11.12 A–7
dhcp enable
#
lldp enable
#
#
#
vlan 1
#
vlan 11 to 13
#
y
nl
ip address 10.1.1.3 255.255.255.0
O
#
#
Se
#
lU
a
port trunk permit vlan 1 11 to 13
rn
#
te
In

P
#
H
port link-type access
r
Fo
port access vlan 1

#
shutdown
#
shutdown
#
shutdown
#
A–8 Rev. 11.12

shutdown
#
#
#
#
return
HP-D
system-view
y
#
nl
sysname HP-D
O
#
Se
lldp enable
#
lU
#
a
#
rn
vlan 1
te
#
In
vlan 11 to 13
#
P
H
ip address 10.1.1.4 255.255.255.0

r
Fo
#
#
#
#
#
Rev. 11.12 A–9
port access vlan 1

#
shutdown
#
shutdown
#
shutdown
#
y
nl
shutdown
O
#
#
Se
#
lU
a
rn
#
te
return
HP-E
In
configure
P
H
hostname "HP-E"
r
Fo
vlan 1
name "DEFAULT_VLAN"
untagged 1-24
ip address 10.1.1.5 255.255.255.0
exit
vlan 11
name "VLAN11"
tagged 1-2
exit
vlan 12
A – 10 Rev. 11.12
name "VLAN12"
tagged 1-2
exit
vlan 13
name "VLAN13"
tagged 1-2
exit
end
HP-F
configure
y
nl
hostname "HP-F"
O
Se
lU
vlan 1
name "DEFAULT_VLAN"
a
untagged 1-24
rn
ip address 10.1.1.6 255.255.255.0

te
exit
In
vlan 11
name "VLAN11"
P
tagged 1-2
H
exit
r
Fo
vlan 12
name "VLAN12"
tagged 1-2
untagged 3
exit
vlan 13
name "VLAN13"
tagged 1-2
exit
end
Rev. 11.12 A – 11
Lab 4.1
Cisco-A
conf t
!
hostname Cisco-A
!
lldp run
!
!
Vlan 11
y
Vlan 12
nl
Vlan 13
O
!
Se
spanning-tree mode mst
spanning-tree extend system-id
lU
spanning-tree pathcost method long
!
a
spanning-tree mst configuration

rn
name HP-Cisco
te
revision 1
In
instance 1 vlan 12
instance 2 vlan 1, 11, 13
P
!
H
spanning-tree mst 0-1 priority 0

r
spanning-tree mst 2 priority 4096

Fo
!
!
!
!
A – 12 Rev. 11.12
!
!
!
interface Vlan1
y
nl
ip address 10.1.1.1 255.255.255.0
O
!!
!
Se
!
line vty 0 4
lU
no login
a
privilege level 15
rn
!
te
End
Cisco-B
In
conf t
P
!
H
hostname Cisco-B
r
Fo
!
lldp run
!
!
Vlan 11
Vlan 12
Vlan 13
!
!
!
spanning-tree portfast default
Rev. 11.12 A – 13

!
name HP-Cisco
revision 1
instance 1 vlan 12
!
!
y
nl
O
Se
!
lU
a
rn

te
!
In

P

H

!
r
Fo
!
!
!
interface Vlan1
ip address 10.1.1.2 255.255.255.0
!
!
!
A – 14 Rev. 11.12
line vty 0 4
no login
privilege level 15
end
HP-C
system-view
#
sysname HP-C
#
lldp enable
y
#
nl
O
#
Se
#
vlan 1
lU
#
vlan 11 to 13
a
#
rn
stp pathcost-standard dot1t

te
stp enable
In
#
stp region-configuration
P
region-name HP-Cisco
H
revision-level 1
r
Fo
instance 1 vlan 12
instance 2 vlan 1 11 13
active region-configuration
#
#
ip address 10.1.1.3 255.255.255.0
#
#
#
Rev. 11.12 A – 15
#
#
port access vlan 1
#
shutdown
#
y
nl
O
shutdown
#
Se
shutdown
lU
#
a
rn
shutdown
te
#
#
In
#
P
H
r
Fo
#
Return
HP-D
system-view
#
sysname HP-D
#
lldp enable
#
#
#
A – 16 Rev. 11.12
vlan 1
#
vlan 11 to 13
#
stp enable
#
revision-level 1
instance 1 vlan 12
y
nl
O
#
#
Se
ip address 10.1.1.4 255.255.255.0
lU
#
a
#
rn
#
te
In

P
#
H
r
Fo

#
port access vlan 1
#
shutdown
#
shutdown
#
Rev. 11.12 A – 17
shutdown
#
shutdown
#
#
#
#
y
nl
Return
HP-F
O
Se
configure
lU
hostname "HP-F"
a
rn
te
vlan 1
In
name "DEFAULT_VLAN"
untagged 1-24
P
ip address 10.1.1.6 255.255.255.0

H
exit
r
Fo
vlan 11
name "VLAN11"
tagged 1-2
exit
vlan 12
name "VLAN12"
tagged 1-2
untagged 3
exit
vlan 13
name "VLAN13"
tagged 1-2
exit
A – 18 Rev. 11.12
spanning-tree
spanning-tree config-name "HP-Cisco"
spanning-tree config-revision 1
spanning-tree instance 1 vlan 12
spanning-tree instance 2 vlan 1 11 13
end
Lab 9.1
Cisco-A
conf t
y
!
nl
hostname Cisco-A
O
!
Se
lldp run
!
lU
ip routing
!
a
Vlan 11
rn
Vlan 12
te
Vlan 13
In
!
P

H

r

Fo
!
name HP-Cisco
revision 1
instance 1 vlan 12
!
!
!
Rev. 11.12 A – 19

!
!
y
nl
O
!
Se
lU
a
!
rn
!
te
interface Vlan1
ip address 10.1.1.1 255.255.255.0
In
standby 1 ip 10.1.1.254
P
standby 1 priority 255

H
standby 1 preempt
!
r
Fo
interface Vlan11
ip address 10.1.11.1 255.255.255.0
!
interface Vlan12
ip address 10.1.12.1 255.255.255.0
ip helper-address 10.1.1.100
standby 12 ip 10.1.12.254
standby 12 preempt
!
interface Vlan13
ip address 10.1.13.1 255.255.255.0
!
A – 20 Rev. 11.12
!
!
line vty 0 4
no login
privilege level 15
end
Cisco-B
conf t
!
hostname Cisco-B
y
!
nl
lldp run
O
!
Se
ip routing
!
lU
Vlan 11
Vlan 12
a
Vlan 13
rn
!
te
!
In
!
P

H

r
Fo

!
name HP-Cisco
revision 1
instance 1 vlan 12
!
!
Rev. 11.12 A – 21

!
!
y
nl
!
O
Se
lU
!
a
!
rn
!
te
interface Vlan1
ip address 10.1.1.2 255.255.255.0
In
standby 1 ip 10.1.1.254
P
standby 1 preempt
H
!
interface Vlan11
r
Fo
ip address 10.1.11.2 255.255.255.0

!
interface Vlan12
ip address 10.1.12.2 255.255.255.0
ip helper-address 10.1.1.100
standby 12 ip 10.1.12.254
standby 12 priority 255
standby 12 preempt
!
interface Vlan13
ip address 10.1.13.2 255.255.255.0
!
A – 22 Rev. 11.12
!
line vty 0 4
no login
privilege level 15
end
HP-C
system-view
#
sysname HP-C
#
y
lldp enable
nl
#
O
Se
#
#
lU
vlan 1
#
a
vlan 11 to 13
rn
#
te
stp instance 0 priority 8192

In

P

H
stp enable
r
Fo
#
revision-level 1
instance 1 vlan 12
#
#
ip address 10.1.1.3 255.255.255.0
dhcp select relay
dhcp relay server-select 1
Rev. 11.12 A – 23
vrrp vrid 1 virtual-ip 10.1.1.253

vrrp vrid 1 priority 254
#
ip address 10.1.12.3 255.255.255.0
dhcp select relay
#
y
nl
#
O
Se
#
lU
a
rn

te
#
In

P

H
#
r
Fo
shutdown
#
shutdown
#
shutdown
#
#
dhcp enable
dhcp relay server-group 1 ip 10.1.1.100
#
A – 24 Rev. 11.12
#
#
Return
HP-D
system-view
#
#
sysname HP-D
y
#
nl
lldp enable
O
Se
#
lU
#
#
a
vlan 1
rn
#
te
vlan 11 to 13
In
#
P

H

r
Fo
stp enable
#
revision-level 1
instance 1 vlan 12
#
#
ip address 10.1.1.4 255.255.255.0
dhcp select relay
Rev. 11.12 A – 25

#
ip address 10.1.12.4 255.255.255.0
dhcp select relay
vrrp vrid 12 priority 254
#
#
y
nl
O
#
Se
lU
a
#
rn
te

In
#
P
H

port trunk permit vlan all
r
Fo
#
#
shutdown
#
shutdown
#
shutdown
#
A – 26 Rev. 11.12
dhcp enable
dhcp relay server-group 1 ip 10.1.1.100
#
#
#
#
return
<HP-D>
HP-E
y
nl
configure
O
Se
hostname "HP-E"
lU
a
vlan 1
rn
name "DEFAULT_VLAN"
te
untagged 1-24
In
ip address 10.1.1.5 255.255.255.0

exit
P
vlan 11
H
name "VLAN11"
r
Fo
tagged 1-2
exit
vlan 12
name "VLAN12"
tagged 1-2
exit
vlan 13
name "VLAN13"
tagged 1-2
exit
spanning-tree
Rev. 11.12 A – 27

end
HP-F
configure
hostname "HP-F"
y
vlan 1
nl
name "DEFAULT_VLAN"
O
untagged 1-24
Se
ip address 10.1.1.6 255.255.255.0
exit
lU
vlan 11
name "VLAN11"
a
tagged 1-2
rn
exit
te
vlan 12
In
name "VLAN12"
tagged 1-2
P
untagged 3
H
exit
r
Fo
vlan 13
name "VLAN13"
tagged 1-2
exit
spanning-tree
end
A – 28 Rev. 11.12
Lab 10.1
Before OSPF configuration
The sections below provide the switches’ configurations before you configure OSPF.
Cisco-A
conf t
!
hostname Cisco-A
!
ip routing
!
y
nl
!
O
! To disable globally STP
! spanning-tree mode pvst
Se
! no spanning-tree vlan 1-4094
!
lU
lldp run
a
!
rn
!
te
description to-Cisco-B
In
switchport access vlan 3

P
spanning-tree bpdufilter enable

H
!
r
Fo
description to-HP-D
!
!
!
interface Vlan3
ip address 10.1.3.1 255.255.255.0
!
interface Vlan5
ip address 10.1.5.1 255.255.255.0
!
Rev. 11.12 A – 29
line vty 0 15
privilege level 15
no login
end
Cisco-B
conf t
!
hostname Cisco-B
!
ip routing
y
!
nl
!
O
Se
lU
!
lldp run
a
!
rn
!
te
!
In
description to-HP-C
P

H

r
!
Fo
description to-Cisco-A
!
description to-HP-E
!
!
interface Vlan2
A – 30 Rev. 11.12
ip address 10.1.2.2 255.255.255.0

!
interface Vlan3
ip address 10.1.3.2 255.255.255.0
!
interface Vlan100
ip address 10.1.100.2 255.255.255.0
!
!
line vty 0 15
privilege level 15
no login
y
nl
!
O
End
HP-C
Se
sysname HP-C
lU
#
#
a

rn
#
te
vlan 1
In
#
vlan 2
P
#
H
vlan 4
r
#
Fo
#
ip address 10.1.2.3 255.255.255.0
#
ip address 10.1.4.3 255.255.255.0
#
port access vlan 2
#
port access vlan 4
Rev. 11.12 A – 31
#
#
shutdown
#
shutdown
#
shutdown
#
y
nl
shutdown
O
#
#
Se
lU
a
#
rn
Return
HP-D
te
In
sysname HP-D
#
P
#
H
lldp enable
r

Fo
#
vlan 1
#
vlan 4 to 5
#
vlan 200
#
#
ip address 10.1.4.4 255.255.255.0
#
A – 32 Rev. 11.12
ip address 10.1.5.4 255.255.255.0

#
ip address 10.1.200.4 255.255.255.0
#
port access vlan 4
#
port access vlan 5
#
y
nl
port access vlan 200
O
#
Se
shutdown
#
lU
a
shutdown
rn
#
te
shutdown
In
#
P
H
shutdown
#
r
Fo
#
#
Return
HP-E
conf t
hostname "HP-E"
ip routing
Rev. 11.12 A – 33
vlan 100
ip address 10.1.100.5 255.255.255.0
exit
vlan 101
untagged 3
ip address 10.1.101.5 255.255.255.0
exit
end
HP-F
y
conf t
nl
O
hostname "HP-F"
Se
ip routing
lU
vlan 200
a
untagged 1
rn
ip address 10.1.200.6 255.255.255.0

te
exit
In
vlan 201
P
untagged 3
H
ip address 10.1.201.6 255.255.255.0

r
exit
Fo
end
After the OSPF configuration

Cisco-A
conf t
!
hostname Cisco-A
!
ip routing
!
A – 34 Rev. 11.12
!
! To disale globally STP
!
lldp run
!
!
description to-Cisco-B
!
y
nl
O
description to-HP-D
Se
!
lU
!
a
!
rn
interface Vlan3
te
ip address 10.1.3.1 255.255.255.0

!
In
interface Vlan5
P
ip address 10.1.5.1 255.255.255.0

H
!
router ospf 1
r
Fo
router-id 1.1.1.1
log-adjacency-changes
network 10.0.0.0 0.255.255.255 area 0
!
line vty 0 15
privilege level 15
no login
end
Cisco-B
conf t
!
Rev. 11.12 A – 35
hostname Cisco-B
!
ip routing
!
!
!
lldp run
!
y
nl
!
O
!
!
Se
description to-HP-C
lU
a
rn
!
te
description to-Cisco-A
In

P

H
!
r
Fo
description to-HP-E
!
!
interface Vlan2
ip address 10.1.2.2 255.255.255.0
!
interface Vlan3
ip address 10.1.3.2 255.255.255.0
!
interface Vlan100
A – 36 Rev. 11.12
ip address 10.1.100.2 255.255.255.0

!
router ospf 1
router-id 1.2.2.2
log-adjacency-changes
area 0 range 10.1.0.0 255.255.248.0
area 1 stub no-summary
area 1 range 10.1.100.0 255.255.252.0
network 10.1.2.2 0.0.0.0 area 0
network 10.1.3.2 0.0.0.0 area 0
network 10.1.100.2 0.0.0.0 area 1
!
y
nl
line vty 0 15
O
privilege level 15
no login
Se
!
End
lU
HP-C
a
sysname HP-C
rn
#
te
#
In

#
P
vlan 1
H
#
r
vlan 2
Fo
#
vlan 4
#
#
ip address 10.1.2.3 255.255.255.0
#
ip address 10.1.4.3 255.255.255.0
#
port access vlan 2
Rev. 11.12 A – 37
#
port access vlan 4
#
#
shutdown
#
shutdown
#
y
nl
shutdown
O
#
Se
shutdown
#
lU
ospf 1 router-id 1.3.3.3
a
area 0.0.0.0
rn
network 10.0.0.0 0.255.255.255

te
#
In
P

H
#
Return
r
Fo
HP-D
sysname HP-D
#
#
lldp enable
#
vlan 1
#
vlan 4 to 5
#
vlan 200
A – 38 Rev. 11.12
#
#
ip address 10.1.4.4 255.255.255.0
#
ip address 10.1.5.4 255.255.255.0
#
ip address 10.1.200.4 255.255.255.0
#
y
nl
port access vlan 4
O
#
Se
port access vlan 5
#
lU
a
port access vlan 200
rn
#
te
shutdown
In
#
P
H
shutdown
#
r
Fo
shutdown
#
shutdown
#
ospf 1 router-id 1.4.4.4
area 0.0.0.0
abr-summary 10.1.0.0 255.255.248.0
network 10.1.4.4 0.0.0.0
network 10.1.5.4 0.0.0.0
area 0.0.0.2
Rev. 11.12 A – 39
abr-summary 10.1.200.0 255.255.254.0

network 10.1.200.4 0.0.0.0
nssa no-summary
nssa default-route-advertise
default-cost 20
#
#
Return
HP-E
y
nl
conf t
O
Se
hostname "HP-E"
lU
ip routing
a
vlan 100
rn
ip address 10.1.100.5 255.255.255.0

te
exit
In
vlan 101
untagged 3
P
ip address 10.1.101.5 255.255.255.0

H
exit
r
Fo
ip router-id 1.5.5.5
router ospf
area 0.0.0.1 stub 20
exit
vlan 100
ip ospf area 1
exit
vlan 101
ip ospf area 1
A – 40 Rev. 11.12
exit
end
HP-F
hostname "HP-F"
ip routing
vlan 200
untagged 1
ip address 10.1.200.6 255.255.255.0
y
exit
nl
O
vlan 201
Se
untagged 3
ip address 10.1.201.6 255.255.255.0
lU
exit
a
ip router-id 1.6.6.6
rn
te
router ospf
In
area 2 nssa 20
redistribute connected
P
exit
r H
Fo
vlan 200
ip ospf 10.1.200.6 area 0.0.0.2
exit
end
Rev. 11.12 A – 41
y
nl
O
Se
lU
a
rn
te
In
P
r H
Fo
A – 42 Rev. 11.12
y
nl
O
Se
a lU
rn
te
In
P
r H
Fo

y
nl
O
Se
a lU
rn
te
In
P
rH
Fo
To learn more about HP networking, visit

www.hp.com/networking
© 2010 Hewlett-Packard Development Company, L.P. The information contained herein is
subject to change without notice. The only warranties for HP products and services are set forth
in the express warranty statements accompanying such products and services. Nothing herein
should be construed as constituting an additional warranty. HP shall not be liable for technical
or editorial errors or omissions contained herein.

HP+Networking+Interoperability+ +Lab+Guide+Rev+11.12

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

HP+Networking+Interoperability+ +Lab+Guide+Rev+11.12

Uploaded by

Copyright:

Available Formats

Lab 2.1: Management

Lab 3.1: Configuring VLANs

Lab equipment ...........................................................................................L4.1-1

Lab steps .................................................................................................. L4.1-2

Activate MSTP ..................................................................................... L4.1-3

Explore MSTP operations ................................................................... L4.1-10

Command reference ................................................................................. L4.1-13

Lab 5.1: Configuring PVST+/MSTP Interoperability: Cisco at the

Objectives ................................................................................................. L5.1-1

Lab 5.2: Configuring PVST+/MSTP Interoperability: HP

Lab 6.1: Implementing Redundant Links Without STP

Command reference ................................................................................. L6.1-13

Lab 7.1: Configuring Spanning Tree Hardening

Objectives ................................................................................................. L7.1-1

Lab equipment ........................................................................................... L7.1-1

Configure and test BPDU guard/BPDU protection ..................................... L7.1-3

Configure loop protect on an HP E-Series switch ....................................... L7.1-7

Configure root guard .......................................................................... L7.1-12

Lab 8.1: Configuring Link Aggregation and IRF

Lab 9.1: Configuring VRRP

Lab 10.1: Configuring OSPF Areas

Command reference ................................................................................ L10.1-11

Lab 10.2: Configuring OSPF Redistribution

Objectives .............................................................................................. L10.2-1

Lab equipment ........................................................................................ L10.2-1

Initial setup....................................................................................... L10.2-2

Set up OSPF ..................................................................................... L10.2-3

Change the administrative distance of external networks, tag imported

Appendix A: Switch Configurations

Rev. 11.12 iii

PAGE INTENTIONALLY LEFT BLANK

HP-C HP-D •Cisco-A=Catalyst 3750 X=1 on Cisco-A

•Cisco-B=Catalyst 3750 X=2 on Cisco-B

•HP-C=HP A5800 X=3 on HP-C

•HP-E= HP E3500 X=5 on HP-E

Figure 2-1: Configuring VLANs

You will need the following equipment:

Rev. 11.12 L2.1 –1

You will share these commands in the lab debrief.

L2.1 –2 Rev. 11.12

VLAN 1 X=3 on HP-C

Switches Port Interface Gigabit

Rev. 11.12 L2.1 –3

On HP A-Series switches, enter:

in which POD is your POD number.

5. On Client_1 (Windows XP) set the IP address to 10.POD.1.101

6. On every switch, set the system or hostname as shown in Figure 2-2.

7. Configure static IP addresses on switches in VLAN 1 as shown in Figure 2-2. Set

9. On Server_1 (IP address 10.POD.1.100), which is running IMC, verify

L2.1 –4 Rev. 11.12

On HP A-Series switches, enter:

On HP E-Series switches, LLDP is enabled by default:

On HP A-Series switches, enter:

On HP E-Series switches, enter:

 Does the LLDP information match your connection settings?

CDP neighbors? What can you conclude?

a. Define a SNMP V2 RO community called public.

On HP A-Series switches, you must enable the SNMP agent

Rev. 11.12 L2.1 –5

[HP-C] snmp-agent trap source vlan-interface 1

On HP E-Series switches, SNMP V2 is enabled by default with public set as the

[HP-C] telnet server enable

[HP-C-ui-vty0-4] authentication-mode none

[HP-C-ui-vty0-4] user privilege level 3