Configuring Mff; Establishing The Configuration Task - Huawei Quidway S9300 Configuration Manual

8 MFF Configuration
Server Deployment on the Network
The IP address of the server can be the IP address of the DHCP server, the IP address of another
server, or the virtual IP address of the VRRP group.
If a network interface receives an ARP request whose source IP address is the IP address of the
server, the interface responds to the ARP request as a gateway. That is, the packets sent from
users are forwarded to the gateway, and then sent to the server. The packets sent by the server,
however, are not forwarded to the gateway.

8.3 Configuring MFF

The MFF function isolates users at Layer 2 and forwards traffic through the gateway.

8.3.1 Establishing the Configuration Task

8.3.2 Enabling Global MFF
8.3.3 Configuring the MFF Network Interface
8.3.4 Enabling MFF in a VLAN
8.3.5 (Optional) Configuring the Static Gateway Address
8.3.6 (Optional) Enabling Timed Gateway Address Detection
8.3.7 (Optional) Setting the Server Address
8.3.8 Checking the Configuration
8.3.1 Establishing the Configuration Task
Applicable Environment
At the access layer of the Metro Ethernet, you can configure the MFF function to implement the
Layer 2 isolation between access users. The traffic between users is forwarded by the gateway
at the Layer 3. In this way, you can filter the user traffic, perform traffic scheduling based on
policies, and charge users.
Pre-configuration Tasks
Before configuring basic MFF functions, complete the following tasks.
If DHCP users exist, you need to perform the following operations:
l
l
Data Preparation
To configure the MFF function, you need the following data.
8-4
Enabling DHCP snooping
Configuring the trusted interface of DHCP snooping
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
Issue 06 (2010–01–08)