HP 3600 v2 Series Security Configuration Manual page 375

In MFF manual mode, enable ARP snooping on the device.
•
Enabling MFF
Follow these steps to enable MFF and specify an MFF operating mode:
To do...
Enter system view
Enter VLAN view
Enable MFF and specify an MFF
operating mode
Configuring a network port
Follow these steps to configure the port as a network port:
To do...
Enter system view
Enter port view
Configure the port as a network
port
Enabling periodic gateway probe
You can configure the MFF device to detect gateways periodically for the change of MAC addresses.
This feature is supported by MFF manual mode and MFF automatic mode.
The time interval for sending gateway probes is 30 seconds. To get a gateway's MAC address, MFF in
automatic mode uses the IP and MAC addresses of the first DHCP snooping entry corresponding to the
gateway as the sender IP and MAC addresses of an ARP request, and sends the ARP request to the
gateway. (In manual mode, MFF uses the IP and MAC addresses of the ARP snooping entry
corresponding to the gateway.) After that, MFF will always use this entry to detect the gateway's MAC
address, unless the entry is removed. If the entry is removed, MFF will look for another entry; if no other
entry is found for the gateway, information about the gateway is removed.
Follow these steps to enable periodic gateway probe:
To do...
Enter system view
Enter VLAN view
Enable periodic gateway probe
Specifying the IP addresses of servers
You need to maintain a server list on the MFF device. The list contains the IP addresses of servers in the
network to ensure communication between the servers and clients.
You can specify a server's IP address in either manual or automatic MFF mode. The server can be a
DHCP server, a server providing some other service, or the real IP address of a VRRP standby group.
After you specify a server's IP address and then an ARP request from the server is received, the MFF
device will search the IP-to-MAC address entries it has stored, and reply with the corresponding MAC
Use the command...
system-view
vlan vlan-id
mac-forced-forwarding { auto |
default-gateway gateway-ip }
Use the command...
system-view
interface interface-type
interface-number
mac-forced-forwarding
network-port
Use the command...
system-view
vlan vlan-id
mac-forced-forwarding gateway
probe
364
Remarks
—
—
Required
Disabled by default.
Remarks
—
—
Required
By default, the port is a user port.
Remarks
—
—
Required
Disabled by default.