Manual-Mode Mff Configuration Example In A Tree Network - HP FlexNetwork 10500 Series Security Configuration Manual

# Configure GigabitEthernet 1/0/6 as a network port.
[SwitchB] interface gigabitethernet 1/0/6
[SwitchB-GigabitEthernet1/0/6] mac-forced-forwarding network-port
# Configure GigabitEthernet 1/0/6 as a DHCP snooping trusted port.
[SwitchB-GigabitEthernet1/0/6] dhcp snooping trust
5. Enable STP on Switch C globally to make sure STP is enabled on interfaces.
<SwitchC> system-view
[SwitchC] stp global enable

Manual-mode MFF configuration example in a tree network

Network requirements
As shown in
addresses manually.
Configure MFF to isolate the hosts at Layer 2 and allow them to communicate with each other
through Gateway at Layer 3.
Figure 150 Network diagram
Configuration procedure
1. Configure IP addresses of the hosts as shown in
2. Configure the IP address of GigabitEthernet 1/0/1 on Gateway.
<Gateway> system-view
[Gateway] interface gigabitethernet 1/0/1
[Gateway-GigabitEthernet1/0/1] ip address 10.1.1.100 24
3. Configure Switch A:
# Configure manual-mode MFF on VLAN 100.
[SwitchA] vlan 100
[SwitchA-vlan100] mac-forced-forwarding default-gateway 10.1.1.100
# Specify the IP address of the server.
[SwitchA-vlan100] mac-forced-forwarding server 10.1.1.200
# Enable ARP snooping on VLAN 100.
[SwitchA-vlan100] arp snooping enable
[SwitchA-vlan100] quit
# Configure GigabitEthernet 1/0/2 as a network port.
Figure 150, all the devices are in VLAN 100. Hosts A, B, and C are assigned IP
Figure 150.
511