Huawei Quidway S9300 Configuration Manual page 250

8 MFF Configuration
# Enable DHCP snooping on the interfaces of the S9300-A. Take the configuration on GE 1/0/1
as an example. The configurations on GE 1/0/2, GE 1/0/3, and GE 2/0/1 are similar to the
configuration on GE 1/0/1 and are not mentioned here.
[S9300-A] interface gigabitethernet 1/0/1
[S9300-A-GigabitEthernet1/0/1] dhcp snooping enable
[S9300-A-GigabitEthernet1/0/1] quit
# Set the status of interface GE 2/0/1 on S9300-A to Trusted.
[S9300-A] interface gigabitethernet 2/0/1
[S9300-A-GigabitEthernet2/0/1] dhcp snooping trusted
[S9300-A-GigabitEthernet2/0/1] quit
# Enable global DHCP snooping on S9300-B.
<Quidway> system-view
[Quidway] sysname S9300-B
[S9300-B] dhcp enable
[S9300-B] dhcp snooping enable
# Enable DHCP snooping on the interfaces of the S9300-B. Take the configuration on GE 1/0/0
as an example. The configurations on GE 2/0/1 and GE 2/0/2 are similar to the configuration on
GE 1/0/0 and are not mentioned here.
[S9300-B] interface gigabitethernet 1/0/0
[S9300-B-GigabitEthernet1/0/0] dhcp snooping enable
[S9300-B-GigabitEthernet1/0/0] quit
# Set the status of interface GE 1/0/0 on S9300-B to Trusted.
[S9300-B] interface gigabitethernet 1/0/0
[S9300-B-GigabitEthernet1/0/0] dhcp snooping trusted
[S9300-B-GigabitEthernet1/0/0] quit
Step 2 Enable global MFF.
# Enable global MFF on S9300-A.
[S9300-A] mac-forced-forwarding enable
# Enable global MFF on S9300-B.
[S9300-B] mac-forced-forwarding enable
Step 3 Configure the MFF network interfaces.
# Configure GE 2/0/1 of S9300-A as the network interface.
[S9300-A] interface gigabitethernet 2/0/1
[S9300-A-GigabitEthernet2/0/1] mac-forced-forwarding network-port
[S9300-A-GigabitEthernet2/0/1] quit
# Configure GE 1/0/0 and GE 2/0/1 of S9300-B as the network interfaces.
[S9300-B] interface gigabitethernet 1/0/0
[S9300-B-GigabitEthernet1/0/0] mac-forced-forwarding network-port
[S9300-B-GigabitEthernet1/0/0] quit
[S9300-B] interface gigabitethernet 2/0/1
[S9300-B-GigabitEthernet2/0/1] mac-forced-forwarding network-port
[S9300-B-GigabitEthernet2/0/1] quit
Step 4 Enable MFF for the VLAN.
# Enable MFF for VLAN 10 on S9300-A.
[S9300-A] vlan 10
[S9300-A-vlan10] mac-forced-forwarding enable
8-10 Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
Issue 06 (2010–01–08)