Mff Features Supported By The S3700 - Huawei Quidway S3700 Series Configuration Manual

Quidway S3700 Series Ethernet Switches
Configuration Guide - Security

8.2 MFF Features Supported by the S3700

This section describes the MFF features supported by the S3700.
Static Gateway
The static gateway is applicable to the scenario where the IP addresses are set statically. When
users are assigned IP addresses statically, the users cannot obtain the gateway information
through the DHCP packets. In this case, a static gateway address needs to be configured for each
VLAN. If the static gateway address is not configured, all the users cannot communicate with
each other except for the DHCP users.
Gateway Address Detection and Maintenance
If the function of timed gateway address detection is enabled, MFF sends detection packets
periodically to check whether the gateway address needs to be updated.
The detection packet is a forged ARP packet whose source IP address and MAC address are the
addresses of the first user in the MFF user list. If the first user entry is deleted, the MFF selects
another user entry to forge the ARP packet. If the gateway does not have any matching user
information after the user entry is deleted, the MFF deletes the probe information.
ARP Proxy
The Layer 3 communication between users is implemented through the ARP proxy. The ARP
proxy reduces the number of broadcast packets at the user side.
MFF processes ARP packets as follows:
l
l
Server Deployment on the Network
The IP address of the server can be the IP address of the DHCP server, the IP address of another
server, or the virtual IP address of the VRRP group.
If a network interface receives an ARP request whose source IP address is the IP address of the
server, the interface responds to the ARP request as a gateway. That is, the packets sent from
users are forwarded to the gateway, and then sent to the server. The packets sent by the server,
however, are not forwarded to the gateway.
Discarding IPv6 Packets
The user-side interface of the MFF device S3700 can discard the IPv6 packets from users to
prevent IPv6 packets from being broadcast on the VLAN. If the S3700 does not discard IPv6
packets, users can learn the MAC addresses of each other, and the MFF user isolation function
will be invalid.
Issue 01 (2011-07-15)
Responds to the ARP requests of users.
MFF substitutes for the gateway to respond to the ARP requests of users. Therefore, all the
packets of users are forwarded at Layer 3 by the gateway. The ARP packet of a user may
be the request for the gateway address or the request for the IP addresses of other users.
Responds to ARP request packets with the user IP address and MAC address.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
8 MFF Configuration
203