Displaying And Maintaining Mff; Mff Configuration Examples; Auto-Mode Mff Configuration Example In A Tree Network - HP FlexNetwork 10500 Series Security Configuration Manual

When the MFF device receives an ARP request from a server, the device searches IP-to-MAC
address entries it has stored. Then the device replies with the requested MAC address to the server.
As a result, packets from a host to a server are forwarded by the gateway. However, packets from a
server to a host are not forwarded by the gateway.
MFF does not check whether the IP address of a server is on the same network segment as that of a
gateway. Instead, it checks whether the IP address of a server is all-zero or all-one. An all-zero or
all-one server IP address is invalid.
You can specify a server's IP address in either manual or automatic MFF mode.
NOTE:
If the server's interface connecting to the MFF device uses secondary IP addresses to send ARP
packets, include all these IP addresses in the server IP address list.
To specify the IP addresses of servers:
Step
1. Enter system view.
2. Enter VLAN view.
3. Specify the IP addresses of
servers.

Displaying and maintaining MFF

Execute display commands in any view.
Task
Display MFF port configuration information.
Display the MFF configuration information for a VLAN.

MFF configuration examples

Auto-mode MFF configuration example in a tree network

Network requirements
As shown in
the DHCP server.
Configure MFF to isolate the hosts at Layer 2 and allow them to communicate with each other
through Gateway at Layer 3.
Command
system-view
vlan vlan-id
mac-forced-forwarding server
server-ip&<1-10>
Figure 148, all the devices are in VLAN 100. Hosts A, B, and C obtain IP addresses from
Command
display mac-forced-forwarding interface
display mac-forced-forwarding vlan vlan-id
507
Remarks
N/A
N/A
By default, no server IP address is
specified.