H3C Technologies H3C S3600 Series Switches User Manual
Page 631
5-10
[SwitchB] interface ethernet 1/0/1
[SwitchB-Ethernet1/0/1] port isolate
[SwitchB-Ethernet1/0/1] ip check source ip-address
[SwitchB-Ethernet1/0/1] arp mac-forced-forwarding user-port
[SwitchB-Ethernet1/0/1] quit
5) Configure Switch C.
# Enable DHCP snooping.
[SwitchC] dhcp-snooping
# Enable ARP detection in VLAN 1.
[SwitchC] vlan 1
[SwitchC-vlan-1] arp detection enable
# Enable MFF.
[SwitchC-vlan-1] arp mac-forced-forwarding default-gateway 10.1.1.1
# Specify the IP address of the DHCP server.
[SwitchC-vlan-1] arp mac-forced-forwarding server 10.1.1.2
# Configure Ethernet 1/0/3 as an ARP detection trusted port.
[SwitchC] interface ethernet 1/0/3
[SwitchC-Ethernet1/0/3] arp detection trust
# Configure Ethernet 1/0/3 as a DHCP snooping trusted port.
[SwitchC-Ethernet1/0/3] dhcp-snooping trust
# Configure Ethernet 1/0/3 as an MFF network port.
[SwitchC-Ethernet1/0/3] arp mac-forced-forwarding network-port
[SwitchC-Ethernet1/0/3] quit
# Configure a static binding and enable IP filtering on Ethernet 1/0/2, and then configure it as an MFF
user port.
[SwitchC] interface ethernet1/0/2
[SwitchC-Ethernet1/0/2] ip source static binding ip-address 10.1.1.100 mac-address
0001-0001-0001
[SwitchC-Ethernet1/0/2] ip check source ip-address mac-address
[SwitchC-Ethernet1/0/2] arp mac-forced-forwarding user-port
[SwitchC-Ethernet1/0/2] quit
# Configure Ethernet 1/0/1 and Ethernet 1/0/4 as MFF network ports.
[SwitchC] interface ethernet1/0/1
[SwitchC-Ethernet1/0/1] arp mac-forced-forwarding network-port
[SwitchC-Ethernet1/0/1] quit
[SwitchC] interface ethernet1/0/4
[SwitchC-Ethernet1/0/4] arp mac-forced-forwarding network-port
[SwitchC-Ethernet1/0/4] quit