H3C S5600 Series Operation Manual page 662

Network diagram
Figure 5-2 MFF network diagram
Configuration procedure
1) Configure Gateway.
# Configure the VLAN interface IP address of the gateway.
<Gateway> system-view
[Gateway] interface Vlan-interface 1
[Gateway-Vlan-interface1] ip address 10.1.1.1 16
2) Configure the DHCP server
<DHCPServer> system-view
[DHCPServer] dhcp enable
[DHCPServer] dhcp server ip-pool 1
[DHCPServer-dhcp-poop-1] network 10.1.1.0 mask 255.255.0.0
[DHCPServer-dhcp-poop-1] gateway-list 10.1.1.1
[DHCPServer-dhcp-poop-1] quit
[DHCPServer]interface Vlan-interface 1
[DHCPServer-Vlan-interface1] ip address 10.1.1.2 16
3) Configure Switch A.
# Enable DHCP snooping.
<SwitchA> system-view
[SwitchA] dhcp-snooping
# Enable ARP intrusion detection in VLAN 1.
[SwitchA] vlan 1
[SwitchA-vlan1] arp detection enable
# Enable MFF.
[SwitchA-vlan-1] arp mac-forced-forwarding auto
# Specify the IP address of the DHCP server.
[SwitchA-vlan-1] arp mac-forced-forwarding server 10.1.1.2
# Configure GigabitEthernet 1/0/2 as an ARP detection trusted port and an DHCP snooping trusted
port.
5-8