Configuring Manual-Mode Mff In A Tree Network - HP 10500 Series Configuration Manual

Security configuration guide
Hide thumbs Also See for 10500 Series:
Table of Contents

Advertisement

[SwitchA-GigabitEthernet1/0/2] dhcp-snooping trust
[SwitchA-GigabitEthernet1/0/2] quit
# Configure GigabitEthernet 1/0/3 as a network port.
[SwitchA] interface gigabitethernet 1/0/3
[SwitchA-GigabitEthernet1/0/3] mac-forced-forwarding network-port
# Configure GigabitEthernet 1/0/3 as a DHCP snooping trusted port.
[SwitchA-GigabitEthernet1/0/3] dhcp-snooping trust no-user-binding
4.
Configure Switch B:
# Enable DHCP snooping.
<SwitchB> system-view
[SwitchB] dhcp-snooping
# Enable STP.
[SwitchB] stp enable
# Enable MFF in automatic mode.
[SwitchB] vlan 100
[SwitchB-vlan-100] mac-forced-forwarding auto
[SwitchB-vlan-100] quit
# Configure GigabitEthernet 1/0/4 as a network port.
[SwitchB] interface gigabitethernet 1/0/4
[SwitchB-GigabitEthernet1/0/4] mac-forced-forwarding network-port
# Configure GigabitEthernet 1/0/4 as a DHCP snooping trusted port.
[SwitchB-GigabitEthernet1/0/4] dhcp-snooping trust no-user-binding
[SwitchB-GigabitEthernet1/0/4] quit
# Configure GigabitEthernet 1/0/6 as a network port.
[SwitchB] interface gigabitethernet 1/0/6
[SwitchB-GigabitEthernet1/0/6] mac-forced-forwarding network-port
# Configure GigabitEthernet 1/0/6 as a DHCP snooping trusted port.
[SwitchB-GigabitEthernet1/0/6] dhcp-snooping trust
5.
Enable STP on Switch C.
<SwitchC> system-view
[SwitchC] stp enable

Configuring manual-mode MFF in a tree network

Network requirements
As shown in
manually.
Configure MFF to isolate the hosts at Layer 2 and allow them to communicate with each other through the
gateway at Layer 3.
Figure 1 1
1, all the devices are in VLAN 100. Hosts A, B, and C are assigned IP addresses
280

Advertisement

Table of Contents
loading

Table of Contents