Troubleshooting mff configuration – H3C Technologies H3C S3600 Series Switches User Manual
Page 632
5-11
z
To ensure that the access-layer switches in the network can correctly learn the DHCP snooping
entries from the downstream access-layer switches, after the configuration on all the access-layer
switches, you need to disable and then enable the VLAN interfaces of all the access-layer switches.
In addition, you need to configure the hosts to obtain IP addresses once again.
z
MFF ensures Layer 3 interoperability among Host A, Host B, Host C and Host D, but not Layer 3
interoperability between these hosts and the access-layer switches Switch A and Switch B.
z
To ensure that user multicast packets are received normally, use the related command, such as
igmp snooping, on the access-layer switch to make it multicast capable. Otherwise, multicast
packets may be discarded by MFF.
Troubleshooting MFF Configuration
z
Hosts configured with static IP addresses cannot access the network. This is because MFF manual
mode is not enabled on the corresponding VLAN of the device connected to these hosts.
z
Hosts configured with static IP addresses cannot access the network. This is because the static
bindings of the hosts are not configured on the port of the device connected to these hosts.
z
Some ARP packets on a user port or a network port cannot be processed correctly and network
traffic is interrupted. This is because ARP detection is not enabled on the VLANs to which the user
port or network port belongs, or because the network port is not configured as an ARP detection
trusted port.
z
An access-layer switch and hosts connected to it cannot obtain IP addresses. This is because the
corresponding network port is not configured as a DHCP snooping trusted port.
z
Packets cannot pass IP filtering or ARP intrusion detection and network traffic is interrupted. This is
because DHCP snooping is not enabled on the access-layer switches, or because DHCP snooping
is not enabled until the hosts and access-layer switches obtain IP addresses.
z
Multicast traffic is interrupted. This is because no multicast command, such as igmp snooping, is
configured on access-layer switches.