Enabling Periodic Gateway Probe; Specifying The Ip Addresses Of Servers - HPE Moonshot 45Gc Security Configuration Manual

Step

Enabling periodic gateway probe

You can configure the MFF device to detect gateways periodically for the change of MAC addresses
by sending forged ARP packets. The ARP packets use 0.0.0.0 as the sender IP address and bridge
MAC address as the sender MAC address.
The interval for sending gateway probes is 30 seconds.
To enable periodic gateway probe:
Step
1. Enter system view.
2. Enter VLAN view.
3. Enable periodic gateway
probe.

Specifying the IP addresses of servers

You must specify the servers on the MFF device to ensure communication between the servers and
clients.
Specify the IP addresses of the following items if they are in the network:
•
Servers providing some other service.
•
Interfaces on a router in a VRRP group.
When the MFF device receives an ARP request from a server, the MFF device searches IP-to-MAC
address entries it has stored. Then the device replies with the requested MAC address to the server.
As a result, packets from a host to a server are forwarded by the gateway. However, packets from a
server to a host are not forwarded by the gateway.
MFF does not check whether the IP address of a server is on the same network segment as that of a
gateway. Instead, it checks whether the IP address of a server is all-zero or all-one. An all-zero or
all-one server IP address is invalid.
NOTE:
If the server's interface connecting to the MFF device uses secondary IP addresses to send ARP
packets, include all these IP addresses in the server IP address list.
To specify the IP addresses of servers:
Step
1. Enter system view.
2. Enter VLAN view.
3. Specify the IP addresses of
servers.
Command
network-port
Command
system-view
vlan vlan-id
mac-forced-forwarding gateway
probe
Command
system-view
vlan vlan-id
mac-forced-forwarding server
server-ip&<1-10>
426
Remarks
Remarks
N/A
N/A
By default, this feature is
disabled.
Remarks
N/A
N/A
By default, no server IP address is
specified.