Configuration procedure, Displaying mff configuration, Mff configuration example – H3C Technologies H3C S3600 Series Switches User Manual
Page 628: Network requirements
5-7
Configuration procedure
Follow these steps to configure an MFF network port:
Operation
Command
Remarks
Enter system view
system-view
—
Enable DHCP snooping
dhcp-snooping
Required
Disabled by default
Enter VLAN view
vlan vlan-id
—
Enable ARP intrusion detection arp detection enable
Required
Disabled by default
Return to system view
quit
—
Enter Ethernet port view
interface interface-type
interface-number
—
Configure the port as a DHCP
snooping trusted port
dhcp-snooping trust
Optional
By default, after DHCP
snooping is enabled, all the
ports of the device are
untrusted ports.
Configure the port as an ARP
intrusion detection trusted port
arp detection trust
Required
By default, a port is not an ARP
intrusion detection trusted port.
Configure the port as an MFF
network port
arp mac-forced-forwarding
network-port
Required
No MFF network port
configured by default
Displaying MFF Configuration
After the above-mentioned configuration, you can use the following display commands in any view to
display the MFF operating status, so as to verify configuration result.
Follow these steps to display MFF configuration:
Operation
Command
Remarks
Display the MFF user port and
MFF network port configuration
information
display arp
mac-forced-forwarding
interface
Display MFF gateway
configuration information
display arp
mac-forced-forwarding vlan
Available in any view
MFF Configuration Example
Network requirements
All the hosts are in VLAN 1. Assign a static IP address to Host A, and configure Host B, Host C, and
Host D to obtain IP addresses dynamically through DHCP.