Reset Search
 

 

Article

An example of PVST (Per VLAN Spanning Tree) configuration on PVLAN (Private VLAN) when connecting to a Cisco switch

« Go Back

Information

 
TitleAn example of PVST (Per VLAN Spanning Tree) configuration on PVLAN (Private VLAN) when connecting to a Cisco switch
Objective
An example of PVST (Per VLAN Spanning Tree) configuration on PVLAN (Private VLAN) when connecting to a Cisco switch.
Environment
  • EXOS All
Procedure
This article explains how to configure PVST+ associated with PVLAN in an ExtremeXOS switch when connecting to a Cisco switch runnning PVST+ on PVLAN.
For PVST+ interoperability between Extreme and Cisco, an ExtremeXOS switch should have individual PVST+ domains created for each VLAN in a PVLAN (Network VLAN and Subscriber VLAN).
 
The following is the topology for this configuration example where 5 switches are full mesh connected. 5 VLANs and 5 different PVST+ domains are created for a PVLAN.
One for network VLAN, two for isolated subscriber VLANs and another two for non-isolated subscriber VLANs. 

User-added image


This example is the configuration of SW3 when the auto-bind feature is enabled to automatically add tagged ports to STP domains using PVST+ encapsulation. 


create vlan V868-IESSED-PRI tag 868
create vlan V869-IESSED-ISO tag 869
create vlan V870-IESSED-ISO tag 870
create vlan V871-IESSED-NISO tag 871
create vlan V872-IESSED-NISO tag 872
configure vlan V868-IESSED-PRI add ports 49, 101, 103 tagged  
configure vlan V869-IESSED-ISO add ports 3 untagged 

create private-vlan PrivateVlan_SED
configure private-vlan PrivateVlan_SED add network V868-IESSED-PRI
configure private-vlan PrivateVlan_SED add subscriber V869-IESSED-ISO
configure private-vlan PrivateVlan_SED add subscriber V870-IESSED-ISO
configure private-vlan PrivateVlan_SED add subscriber V871-IESSED-NISO non-isolated
configure private-vlan PrivateVlan_SED add subscriber V872-IESSED-NISO non-isolated

create stpd S868-IESSED-PRI
configure stpd S868-IESSED-PRI mode dot1w
configure stpd S868-IESSED-PRI priority 4096
configure stpd S868-IESSED-PRI default-encapsulation pvst-plus
enable stpd S868-IESSED-PRI auto-bind vlan V868-IESSED-PRI
configure stpd S868-IESSED-PRI tag 868
enable stpd S868-IESSED-PRI 

create stpd s869-IESSED-ISO
configure stpd s869-IESSED-ISO mode dot1w
# configure stpd S869-IESSED-ISO priority 4096
configure stpd s869-IESSED-ISO default-encapsulation pvst-plus
enable stpd s869-IESSED-ISO auto-bind vlan V869-IESSED-ISO
configure stpd s869-IESSED-ISO add vlan V869-IESSED-ISO ports 3 dot1d
configure stpd s869-IESSED-ISO tag 869
enable stpd s869-IESSED-ISO

create stpd s870-IESSED-ISO
configure stpd s870-IESSED-ISO mode dot1w
# configure stpd S870-IESSED-ISO priority 4096
configure stpd s870-IESSED-ISO default-encapsulation pvst-plus
enable stpd s870-IESSED-ISO auto-bind vlan V870-IESSED-ISO
configure stpd s870-IESSED-ISO tag 870
enable stpd s870-IESSED-ISO

create stpd s871-IESSED-NISO
configure stpd s871-IESSED-NISO mode dot1w
# configure stpd S871-IESSED-NISO priority 4096
configure stpd s871-IESSED-NISO default-encapsulation pvst-plus
enable stpd s871-IESSED-NISO auto-bind vlan V871-IESSED-NISO
configure stpd s871-IESSED-NISO tag 871
enable stpd s871-IESSED-NISO

create stpd s872-IESSED-NISO
configure stpd s872-IESSED-NISO mode dot1w
# configure stpd S872-IESSED-NISO priority 4096
configure stpd s872-IESSED-NISO default-encapsulation pvst-plus
enable stpd s872-IESSED-NISO auto-bind vlan V872-IESSED-NISO
configure stpd s872-IESSED-NISO tag 872
enable stpd s872-IESSED-NISO


This example is the configuration of SW3 when tagged ports are manually added to STP domains using PVST+ encapsulation. (In PVLAN environment, network VLAN ports are part of subscriber VLANs without a manual configuration.)

create stpd S868-IESSED-PRI
configure stpd S868-IESSED-PRI mode dot1w
configure stpd S868-IESSED-PRI priority 4096
configure stpd S868-IESSED-PRI default-encapsulation pvst-plus
configure stpd S868-IESSED-PRI add vlan V868-IESSED-PRI ports 49 101 103 pvst-plus
configure stpd S868-IESSED-PRI tag 868
enable stpd S868-IESSED-PRI 

create stpd s869-IESSED-ISO
configure stpd s869-IESSED-ISO mode dot1w
# configure stpd S869-IESSED-ISO priority 4096
configure stpd s869-IESSED-ISO default-encapsulation pvst-plus
configure stpd s869-IESSED-ISO add vlan V869-IESSED-ISO ports 49 101 103 pvst-plus
configure stpd s869-IESSED-ISO add vlan V869-IESSED-ISO ports 3 dot1d
configure stpd s869-IESSED-ISO tag 869
enable stpd s869-IESSED-ISO

create stpd s870-IESSED-ISO
configure stpd s870-IESSED-ISO mode dot1w
# configure stpd S870-IESSED-ISO priority 4096
configure stpd s870-IESSED-ISO default-encapsulation pvst-plus
configure stpd s870-IESSED-ISO add vlan V870-IESSED-ISO ports 49 101 103 pvst-plus
configure stpd s870-IESSED-ISO tag 870
enable stpd s870-IESSED-ISO

create stpd s871-IESSED-NISO
configure stpd s871-IESSED-NISO mode dot1w
# configure stpd S871-IESSED-NISO priority 4096
configure stpd s871-IESSED-NISO default-encapsulation pvst-plus
configure stpd s871-IESSED-NISO add vlan V871-IESSED-NISO ports 49 101 103 pvst-plus
configure stpd s871-IESSED-NISO tag 871
enable stpd s871-IESSED-NISO

create stpd s872-IESSED-NISO
configure stpd s872-IESSED-NISO mode dot1w
# configure stpd S872-IESSED-NISO priority 4096
configure stpd s872-IESSED-NISO default-encapsulation pvst-plus
configure stpd s872-IESSED-NISO add vlan V872-IESSED-NISO ports 49 101 103 pvst-plus
configure stpd s872-IESSED-NISO tag 872
enable stpd s872-IESSED-NISO


The following outputs show the status of the PVST+ STP domains in SW1

# show s868 ports 
Port   Mode   State      Cost  Flags     Priority Port ID Designated Bridge
1*     PVST+  FORWARDING 1800  eRapaw---- 128      8001    10:00:00:04:96:97:89:7d
3*     PVST+  BLOCKING   1800  eAapaw---- 128      8003    80:00:00:04:96:97:89:7f
48     PVST+  BLOCKING   2000  eAapaw---- 128      8030    80:00:00:04:96:6d:10:96

# show s869 ports 
Port   Mode   State      Cost  Flags     Priority Port ID Designated Bridge
1*     PVST+  BLOCKING   1800  eAapaw---- 128      8001    80:00:00:04:96:97:89:7d
3*     PVST+  FORWARDING 1800  eRapaw---- 128      8003    10:00:00:04:96:97:89:7f
48     PVST+  BLOCKING   2000  eAap-w---- 128      8030    80:00:00:04:96:6d:10:96

# show s870 ports 
Port   Mode   State      Cost  Flags     Priority Port ID Designated Bridge
1*     PVST+  BLOCKING   1800  eAap-w---- 128      8001    80:00:00:04:96:97:89:7d
3*     PVST+  FORWARDING 1800  eRapaw---- 128      8003    10:00:00:04:96:97:89:7f
48     PVST+  BLOCKING   2000  eAap-w---- 128      8030    80:00:00:04:96:6d:10:96

# show s871 ports 
Port   Mode   State      Cost  Flags     Priority Port ID Designated Bridge
1*     PVST+  BLOCKING   1800  eAapaw---- 128      8001    80:00:00:04:96:97:89:7d
3*     PVST+  FORWARDING 1800  eRapaw---- 128      8003    10:00:00:04:96:97:89:7f
48     PVST+  BLOCKING   2000  eAapaw---- 128      8030    80:00:00:04:96:6d:10:96

# show s872 ports 
Port   Mode   State      Cost  Flags     Priority Port ID Designated Bridge
1*     PVST+  BLOCKING   1800  eAap-w---- 128      8001    80:00:00:04:96:97:89:7d
3*     PVST+  FORWARDING 1800  eRapaw---- 128      8003    10:00:00:04:96:97:89:7f
48     PVST+  BLOCKING   2000  eAap-w---- 128      8030    80:00:00:04:96:6d:10:96
Additional notes
CR xos0063457: Configuration for adding network VLAN ports in STP for subscriber is not saved. Fixed in 15.7.3.1-patch1-4 or later.
(A network VLAN port can be manually added to a STP domain of a subscriber VLAN but the command is not saved in the configuration and will be lost after a reboot.)   

Feedback

 

Was this article helpful?


   

Feedback

Please tell us how we can make this article more useful.

Characters Remaining: 255