L2VPN Configuration Guide for Cisco 8000 Series Routers, Cisco IOS XR Releases

PDF

L2VPN Configuration Guide for Cisco 8000 Series Routers, Cisco IOS XR Releases

Configure MSTP base services

Updated: September 11, 2026

Want to summarize with AI?

Log in

Guides configuration of MSTP base services, enabling essential MSTP functions for foundational network layer protection.

Set up the essential service objects required for MSTP operation, including VLAN interfaces, Layer 2 VPN bridge domains, and MSTP parameters.

By default, STP is disabled on all interfaces. MSTP must be enabled on each physical or Ethernet Bundle interface to support Layer 2 redundancy and loop prevention. Once enabled on a parent interface, all its subinterfaces are MSTP-enabled automatically.

Perform these tasks to configure MSTP:

  • Configure VLAN interfaces.

  • Configure Layer 2 VPN bridge domains.

  • Configure MSTP parameters.

Before you begin

Make sure that the target interfaces and VLAN IDs are available in your router configuration.

Procedure

  1. Configure the VLAN interfaces.

    Example:

    Router# configure
Router(config)# interface HundredGigE0/0/0/2.1001 l2transport
Router(config-subif)# encapsulation dot1q 1001
Router(config)# interface HundredGigE0/0/0/3.1001 l2transport
Router(config-subif)# encapsulation dot1q 1001
Router(config)# interface HundredGigE0/0/0/14.1001 l2transport
Router(config-subif)# encapsulation dot1q 1001
Router(config)# interface HundredGigE0/0/0/2.1021 l2transport
Router(config-subif)# encapsulation dot1q 1021
Router(config)# interface HundredGigE0/0/0/3.1021 l2transport
Router(config-subif)# encapsulation dot1q 1021
Router(config)# interface HundredGigE0/0/0/14.1021 l2transport
Router(config-subif)# encapsulation dot1q 1021
Router(config-subif)# commit

  2. Configure the Layer 2 VPN bridge domains.

    Example:

    Router# configure
Router(config)# l2vpn bridge group mstp
Router(config-l2vpn-bg)# bridge-domain mstp1001
Router(config-l2vpn-bg-bd)# int HundredGigE 0/0/0/2.1001
Router(config-l2vpn-bg-bd-ac)# exit
Router(config-l2vpn-bg-bd)# int HundredGigE 0/0/0/3.1001
Router(config-l2vpn-bg-bd-ac)# exit
Router(config-l2vpn-bg-bd)# int HundredGigE 0/0/0/14.1001
Router(config-l2vpn-bg-bd-ac)# exit
Router(config-l2vpn-bg-bd)# exit
Router(config-l2vpn-bg)# exit
Router(config-l2vpn-bg)# bridge-domain mstp1021
Router(config-l2vpn-bg-bd)# int HundredGigE 0/0/0/2.1021
Router(config-l2vpn-bg-bd-ac)# exit
Router(config-l2vpn-bg-bd)# int HundredGigE 0/0/0/3.1021
Router(config-l2vpn-bg-bd-ac)# exit
Router(config-l2vpn-bg-bd)# int HundredGigE 0/0/0/14.1021
Router(config-l2vpn-bg-bd-ac)# commit

  3. Configure the MSTP parameters for the service.

    Example:

    Router# configure
Router(config)# spanning-tree mst a
Router(config-mstp)# interface HundredGigE0/0/0/2
Router(config-mstp-if)# portfast bpduguard
Router(config-mstp-if)# commit