Manual-Mode Mff Configuration Example In A Tree Network - HP 3600 v2 Series Security Configuration Manual

Manual-mode MFF configuration example in a tree network

Network requirements
As shown in
IP addresses manually. They are isolated at Layer 2, and can communicate with each other through
Gateway. To ensure communication between hosts and the server, the IP address of the server is
specified on the MFF devices manually.
Figure 142 Network diagram
Configuration procedure
Configure IP addresses of the hosts as shown in
1.
Configure Gateway
2.
# Configure the IP address of VLAN-interface 1.
<Gateway> system-view
[Gateway] interface Vlan-interface 1
[Gateway-Vlan-interface1] ip address 10.1.1.100 24
Configure Switch A
3.
# Configure manual-mode MFF.
[SwitchA] vlan 100
[SwitchA-vlan-100] mac-forced-forwarding default-gateway 10.1.1.100
# Specify the IP address of the server.
[SwitchA-vlan-100] mac-forced-forwarding server 10.1.1.200
# Enable ARP snooping.
[SwitchA-vlan-100] arp-snooping enable
[SwitchA-vlan-100] quit
# Configure Ethernet 1/0/2 as a network port.
[SwitchA] interface ethernet 1/0/2
[SwitchA-Ethernet1/0/2] mac-forced-forwarding network-port
Configure Switch B
4.
# Configure manual-mode MFF.
[SwitchB] vlan 100
Figure 142, all the devices are in VLAN 100. Host A, Host B, and Host C are configured with
Figure 142.
369