Auto-Mode Mff Configuration Example In A Ring Network - HP FlexNetwork 10500 Series Security Configuration Manual

# Enable DHCP snooping.
<SwitchB> system-view
[SwitchB] dhcp snooping enable
# Enable MFF in automatic mode on VLAN 100.
[SwitchB] vlan 100
[SwitchB-vlan100] mac-forced-forwarding auto
[SwitchB-vlan100] quit
# Configure IP address 10.1.1.50 for the DHCP server.
[SwitchB-vlan100] mac-forced-forwarding server 10.1.1.50
# Configure GigabitEthernet 1/0/6 as a network port.
[SwitchB] interface gigabitethernet 1/0/6
[SwitchB-GigabitEthernet1/0/6] mac-forced-forwarding network-port
# Configure GigabitEthernet 1/0/6 as a DHCP snooping trusted port.
[SwitchB-GigabitEthernet1/0/6] dhcp snooping trust

Auto-mode MFF configuration example in a ring network

Network requirements
As shown in
and C obtain IP addresses from the DHCP server.
Configure MFF to isolate the hosts at Layer 2 and allow them to communicate with each other
through Gateway at Layer 3.
Figure 149 Network diagram
Configuration procedure
1. Configure the IP address of GigabitEthernet 1/0/1 on Gateway.
<Gateway> system-view
[Gateway] interface gigabitethernet 1/0/1
[Gateway-GigabitEthernet1/0/1] ip address 10.1.1.100 24
2. Configure the DHCP server:
# Enable DHCP and configure DHCP address pool 1.
<Device> system-view
[Device] dhcp enable
[Device] dhcp server ip-pool 1
[Device-dhcp-pool-1] network 10.1.1.0 mask 255.255.255.0
Figure 149, all the devices are in VLAN 100, and the switches form a ring. Hosts A, B,
509