Example: Configuring MFF in a tree network

Network configuration

As shown in Figure 174, all the devices are in VLAN 100. Hosts A, B, and C are assigned IP addresses manually.

Configure MFF to isolate the hosts at Layer 2 and allow them to communicate with each other through the gateway at Layer 3.

Figure 174: Network diagram

Procedure

  1. Configure the IP addresses of the hosts and the gateway, as shown in Figure 174.

  2. Configure Switch A:

    # Configure MFF on VLAN 100.

    [SwitchA] vlan 100
    [SwitchA-vlan100] mac-forced-forwarding default-gateway 10.1.1.100
    

    # Specify the IP address of the server.

    [SwitchA-vlan100] mac-forced-forwarding server 10.1.1.200
    

    # Enable ARP snooping on VLAN 100.

    [SwitchA-vlan100] arp snooping enable
    [SwitchA-vlan100] quit
    

    # Configure HundredGigE 1/0/1 as a network port.

    [SwitchA] interface hundredgige 1/0/1
    [SwitchA-HundredGigE1/0/1] mac-forced-forwarding network-port
    
  3. Configure Switch B:

    # Configure MFF on VLAN 100.

    [SwitchB] vlan 100
    [SwitchB-vlan100] mac-forced-forwarding default-gateway 10.1.1.100
    

    # Specify the IP address of the server.

    [SwitchB-vlan100] mac-forced-forwarding server 10.1.1.200
    

    # Enable ARP snooping on VLAN 100.

    [SwitchB-vlan100] arp snooping enable
    [SwitchB-vlan100] quit
    

    # Configure HundredGigE 1/0/2 as a network port.

    [SwitchB] interface hundredgige 1/0/2 1/0/6
    [SwitchB-HundredGigE1/0/2] mac-forced-forwarding network-port