H3C Technologies H3C S3600 Series Switches - Manual (Page 626)

5-5
Specifying the IP Addresses of Servers
For communication between hosts connected to an MFF enabled switch and a server, you need to
specify the server’s IP address in either manual or automatic MFF mode. The server can be a DHCP
server or a server providing some other service. After you specify a server’s IP address and then an
ARP request from the server is received, the MFF device will reply with the corresponding MAC address
to the server. In this way, packets from a host to a server are forwarded by the gateway, while packets
from a server to a host are not forwarded by the gateway.
Follow these steps to specify the IP addresses of servers:
Operation Command Remarks
Enter system view system-view —
Enter VLAN view vlan vlan-id —
Specify the IP addresses of
servers arp mac-forced-forwarding
server server-ip&<1-10> Required
Not specified by default
z If MFF automatic mode is enabled, and the gateway and DHCP server do not run on the same
device, you need to use this command to specify the IP address of the DHCP server.
z If a VRRP group serves as an MFF gateway, you need to use this command to specify all the IP
addresses of the switches in the VRRP group.
Configuring User Port
Configuration prerequisites
Before configuring a port as an MFF user port, enable DHCP snooping on the access-layer switch and
verify the following:
z ARP intrusion detection is enabled in the VLAN to which the port belongs.
z IP filtering is enabled on the port.
z The port is a member of a port isolation group.
Configuration procedure
Follow these steps to configure an MFF user port:
Operation Command Remarks
Enter system view system-view —
Enable DHCP snooping dhcp-snooping
Required
Disabled by default
Enter VLAN view vlan vlan-id —
Enable ARP intrusion detection arp detection enable
Required
Disabled by default
Return to system view quit —