Manual-Mode Mff Configuration Example In A Ring Network - HPE FlexNetwork 5510 HI Series Security Configuration Manual

[SwitchB-vlan100] mac-forced-forwarding server 10.1.1.200
# Enable ARP snooping on VLAN 100.
[SwitchB-vlan100] arp snooping enable
[SwitchB-vlan100] quit
# Configure GigabitEthernet 1/0/6 as a network port.
[SwitchB] interface gigabitethernet 1/0/6
[SwitchB-GigabitEthernet1/0/6] mac-forced-forwarding network-port

Manual-mode MFF configuration example in a ring network

Network requirements
As shown in
and C are assigned IP addresses manually.
Configure MFF to isolate the hosts at Layer 2 and allow them to communicate with each other
through Gateway at Layer 3.
Figure 132 Network diagram
Host A
10.1.1.1/24
GE1/0/5
Host B
10.1.1.2/24
Host C
10.1.1.3/24
Configuration procedure
1. Configure the IP addresses of the hosts and Gateway as shown in
2. Configure Switch A:
# Enable STP globally to make sure STP is enabled on interfaces.
[SwitchA] stp global enable
# Configure manual-mode MFF on VLAN 100.
[SwitchA] vlan 100
[SwitchA-vlan100] mac-forced-forwarding default-gateway 10.1.1.100
# Specify the IP address of the server.
[SwitchA-vlan100] mac-forced-forwarding server 10.1.1.200
# Enable ARP snooping on VLAN 100.
[SwitchA-vlan100] arp snooping enable
[SwitchA-vlan100] quit
# Configure GigabitEthernet 1/0/2 and GigabitEthernet 1/0/3 as network ports.
[SwitchA] interface gigabitethernet 1/0/2
[SwitchA-GigabitEthernet1/0/2] mac-forced-forwarding network-port
[SwitchA-GigabitEthernet1/0/2] quit
Figure 132, all the devices are in VLAN 100, and the switches form a ring. Hosts A, B,
Switch A
GE1/0/1 GE1/0/2 GE1/0/8
GE1/0/3
GE1/0/4
GE1/0/6
Switch B
GE1/0/7
Switch C
GE1/0/9
GE1/0/10
436
Gateway
10.1.1.100/24
Server
10.1.1.200/24
Figure 132.