HP 3600 v2 Series Security Configuration Guide

364
• In MFF manual mode, enable ARP snooping on the device.
Enabling MFF
Follow these steps to enable MFF and specify an MFF operating mode:
To do… Use the command…
Remarks
Enter system view system-view —
Enter VLAN view vlan vlan-id —
Enable MFF and specify an MFF
operating mode
mac-forced-forwarding { auto |
default-gateway gateway-ip }
Required
Disabled by default.
Configuring a network port
Follow these steps to configure the port as a network port:
To do… Use the command…
Remarks
Enter system view system-view —
Enter port view
interface interface-type
interface-number
—
Configure the port as a network
port
mac-forced-forwarding
network-port
Required
By default, the port is a user port.
Enabling periodic gateway probe
You can configure the MFF device to detect gateways periodically for the change of MAC addresses.
This feature is supported by MFF manual mode and MFF automatic mode.
The time interval for sending gateway probes is 30 seconds. To get a gateway’s MAC address, MFF in
automatic mode uses the IP and MAC addresses of the first DHCP snooping entry corresponding to the
gateway as the sender IP and MAC addresses of an ARP request, and sends the ARP request to the
gateway. (In manual mode, MFF uses the IP and MAC addresses of the ARP snooping entry
corresponding to the gateway.) After that, MFF will always use this entry to detect the gateway’s MAC
address, unless the entry is removed. If the entry is removed, MFF will look for another entry; if no other
entry is found for the gateway, information about the gateway is removed.
Follow these steps to enable periodic gateway probe:
To do… Use the command…
Remarks
Enter system view system-view —
Enter VLAN view vlan vlan-id —
Enable periodic gateway probe
mac-forced-forwarding gateway
probe
Required
Disabled by default.
Specifying the IP addresses of servers
You need to maintain a server list on the MFF device. The list contains the IP addresses of servers in the
network to ensure communication between the servers and clients.
You can specify a server’s IP address in either manual or automatic MFF mode. The server can be a
DHCP server, a server providing some other service, or the real IP address of a VRRP standby group.
After you specify a server’s IP address and then an ARP request from the server is received, the MFF
device will search the IP-to-MAC address entries it has stored, and reply with the corresponding MAC

HP 3600 v2 Series Specifications

General

Brand	HP
Model	3600 v2 Series
Category	Switch
Language	English