Example: Configuring MFF in a tree network

As shown in Figure 174, all the devices are in VLAN 100. Hosts A, B, and C are assigned IP addresses manually.

Configure MFF to isolate the hosts at Layer 2 and allow them to communicate with each other through the gateway at Layer 3.

1. Configure the IP addresses of the hosts and the gateway, as shown in Figure 174.

2. Configure Switch A:

   # Configure MFF on VLAN 100.

   [SwitchA] vlan 100
   [SwitchA-vlan100] mac-forced-forwarding default-gateway 10.1.1.100
   

   # Specify the IP address of the server.

   [SwitchA-vlan100] mac-forced-forwarding server 10.1.1.200
   

   # Enable ARP snooping on VLAN 100.

   [SwitchA-vlan100] arp snooping enable
   [SwitchA-vlan100] quit
   

   # Configure HundredGigE 1/0/1 as a network port.

   [SwitchA] interface hundredgige 1/0/1
   [SwitchA-HundredGigE1/0/1] mac-forced-forwarding network-port
   

3. Configure Switch B:

   # Configure MFF on VLAN 100.

   [SwitchB] vlan 100
   [SwitchB-vlan100] mac-forced-forwarding default-gateway 10.1.1.100
   

   # Specify the IP address of the server.

   [SwitchB-vlan100] mac-forced-forwarding server 10.1.1.200
   

   # Enable ARP snooping on VLAN 100.

   [SwitchB-vlan100] arp snooping enable
   [SwitchB-vlan100] quit
   

   # Configure HundredGigE 1/0/2 as a network port.

   [SwitchB] interface hundredgige 1/0/2 1/0/6
   [SwitchB-HundredGigE1/0/2] mac-forced-forwarding network-port