Configuring manual-mode MFF in a ring network
Network requirements
As shown in Figure 132, all the devices are in VLAN 100, and the switches form a ring. Hosts A, B, and C are assigned IP addresses manually.
Configure MFF to isolate the hosts at Layer 2 and allow them to communicate with each other with each other through the gateway.
Figure 132: Network diagram
Configuration procedure
Configure IP addresses of the hosts as in shown in Figure 132.
Configure the IP address of GigabitEthernet 1/0/1 on the gateway.
<Gateway> system-view [Gateway] interface gigabitethernet 1/0/1 [Gateway-GigabitEthernet1/0/1] ip address 10.1.1.100 24
Configure Switch A:
# Enable STP.
[SwitchA] stp enable
# Configure manual-mode MFF.
[SwitchA] vlan 100 [SwitchA-vlan-100] mac-forced-forwarding default-gateway 10.1.1.100
# Specify the IP address of the server.
[SwitchA-vlan-100] mac-forced-forwarding server 10.1.1.200
# Enable ARP snooping.
[SwitchA-vlan-100] arp-snooping enable [SwitchA-vlan-100] quit
# Configure GigabitEthernet 1/0/2 and GigabitEthernet 1/0/3 as network ports.
[SwitchA] interface gigabitethernet 1/0/2 [SwitchA-GigabitEthernet1/0/2] mac-forced-forwarding network-port [SwitchA-GigabitEthernet1/0/2] quit [SwitchA] interface gigabitethernet 1/0/3 [SwitchA-GigabitEthernet1/0/3] mac-forced-forwarding network-port
Configure Switch B:
# Enable STP.
[SwitchB] stp enable
# Configure manual-mode MFF.
[SwitchB] vlan 100 [SwitchB-vlan-100] mac-forced-forwarding default-gateway 10.1.1.100
# Specify the IP address of the server.
[SwitchB-vlan-100] mac-forced-forwarding server 10.1.1.200
# Enable ARP snooping.
[SwitchB-vlan-100] arp-snooping enable [SwitchB-vlan-100] quit
# Configure GigabitEthernet 1/0/4 and GigabitEthernet 1/0/6 as network ports.
[SwitchB] interface gigabitethernet 1/0/4 [SwitchB-GigabitEthernet1/0/4] mac-forced-forwarding network-port [SwitchB-GigabitEthernet1/0/4] quit [SwitchB] interface gigabitethernet 1/0/6 [SwitchB-GigabitEthernet1/0/6] mac-forced-forwarding network-port
Enable STP on Switch C.
<SwitchC> system-view [SwitchC] stp enable