Manual-Mode Mff Configuration Example In A Ring Network - HPE Moonshot 45Gc Security Configuration Manual

[SwitchA-FortyGigE1/1/2] mac-forced-forwarding network-port
3. Configure Switch B:
# Configure manual-mode MFF on VLAN 100.
[SwitchB] vlan 100
[SwitchB-vlan100] mac-forced-forwarding default-gateway 10.1.1.100
# Specify the IP address of the server.
[SwitchB-vlan100] mac-forced-forwarding server 10.1.1.200
# Enable ARP snooping on VLAN 100.
[SwitchB-vlan100] arp snooping enable
[SwitchB-vlan100] quit
# Configure FortyGigE 1/1/2 as a network port.
[SwitchB] interface fortygige 1/1/2
[SwitchB-FortyGigE1/1/2] mac-forced-forwarding network-port

Manual-mode MFF configuration example in a ring network

Network requirements
As shown in
and C are assigned IP addresses manually.
Configure MFF to isolate the hosts at Layer 2 and allow them to communicate with each other
through Gateway at Layer 3.
Figure 132 Network diagram
Configuration procedure
1. Configure the IP addresses of the hosts and Gateway as shown in
2. Configure Switch A:
# Enable STP globally to make sure STP is enabled on interfaces.
[SwitchA] stp global enable
# Configure manual-mode MFF on VLAN 100.
[SwitchA] vlan 100
[SwitchA-vlan100] mac-forced-forwarding default-gateway 10.1.1.100
# Specify the IP address of the server.
[SwitchA-vlan100] mac-forced-forwarding server 10.1.1.200
Figure 132, all the devices are in VLAN 100, and the switches form a ring. Hosts A, B,
428
Figure 132.