4-31Before enabling digest snooping, ensure that associated devices of different vendors areinterconnected and run MSTP.Configuring the Digest Snooping featureYou can enable Digest Snooping only on a device that is connected to a third-party device that uses itsprivate key to calculate the configuration digest.Follow these steps to configure Digest Snooping:To do... Use the command... RemarksEnter system view system-view —Enter Ethernetinterface view, orLayer 2 aggregateinterface viewinterface interface-typeinterface-numberEnterinterface viewor port groupview Enter port groupviewport-group manualport-group-nameRequiredUse either command.Enable digest snooping on theinterface or port group stp config-digest-snooping RequiredNot enabled by defaultReturn to system view quit —Enable global digest snooping stp config-digest-snooping RequiredNot enabled by defaultz With the Digest Snooping feature enabled, comparison of configuration digest is not needed forin-the-same-region check, so the VLAN-to-instance mappings must be the same on associatedports.z With global Digest Snooping enabled, modification of VLAN-to-instance mappings and removingof the current region configuration using the undo stp region-configuration command are notallowed. You can only modify the region name and revision level.z You need to enable this feature both globally and on associated ports to make it take effect. It isrecommended to enable the feature on all associated ports first and then globally, thus making theconfiguration take effect on all configured ports and reducing impact on the network, and disablethe feature globally to disable it on all associated ports.z You are recommended not to enable Digest Snooping on MST region edge ports, thus avoidingloops.z You are recommended to enable Digest Snooping first and then MSTP. Do not configure DigestSnooping when the network works well, thus avoiding traffic interruption.
