H3C Technologies H3C WX6000 Series Access Controllers - Manual (Page 192)

20-34
z
You can only enable the Digest Snooping feature on the device connected to another vendor’s
device that uses a private key to calculate the configuration digest.
z
With the Digest Snooping feature enabled, comparison of configuration digest is not needed for
in-the-same-region check, so the VLAN-to-instance mappings must be the same on associated
ports.
z
With global Digest Snooping enabled, modification of VLAN-to-instance mappings and removing of
the current region configuration using the undo stp region-configuration command are not
allowed. You can only modify the region name and revision level.
z
You need to enable this feature both globally and on associated ports to make it take effect. It is
recommended to enable the feature on all associated ports first and then globally, making all
configured ports take effect, and disable the feature globally to disable it on all associated ports.
z
It is not recommended to enable Digest Snooping on the MST region edge port to avoid loops.
z
It is recommended to enable Digest Snooping first and then MSTP. Do not enable Digest Snooping
when the network works well to avoid traffic interruption.
Configuration Example
Network requirements
z
AC A and AC B connect to a third-party device and all the devices are in the same region.
z
Enable Digest Snooping on AC A and AC B so that the three devices can communicate with one
another.
Network diagram
Figure 20-6 Digest Snooping configuration
Configuration procedure
1) Enable Digest Snooping on AC A
# Enable Digest Snooping on GigabitEthernet 0/0/1.
<AC A> system-view
[AC A] interface GigabitEthernet 0/0/1
[AC A-GigabitEthernet0/0/1] stp config-digest-snooping
# Enable global Digest Snooping.