Zte ZXR10 2900E Series - MFF Configuration

ZXR102900ESeriesCongurationGuide
Lease:-
Clearrequest:-
Dhcprelayconfigurationasfollows:
Relayagent:enable
ServerIP:10.230.72.2
5.46MFFConguration
MFFOverview
TheMFFfunctionisusedonauseraccessdevicetoisolateusersattheaccessside.It
implementslayer-2isolationandlayer-3interworkingbetweenusersinabroadcastdomain
withoutanyextraVLANbeingcreated.WhenanaccessswitchconguredwiththeMFF
functionreceivesanARPrequestfromauser,theswitchreplieswithanARPresponse
containingthegatewayMACaddressthroughtheARPproxymechanism.Inthisway,all
users'trafc(includingthetrafcbetweenusersinthesamesubnet)issenttothegateway
accessroutercompulsively.Thegatewaycanmonitortrafcandpreventattacksamong
users,whichimprovesnetworksecurity.
TherearetwotypesofMFFports:userportsandnetworkports.MFFuserportsare
connectedtoterminalusers.WhenreceivinganARPpacketfromauserport,theswitch
maintainsanMFFusertable,andreplieswitharesponse.MFFnetworkportsare
connectedtouplinkdevicesorgateways.
TherearetwoMFFoperationmodes:staticmodeanddynamicmode.
lStaticmode:TheIPaddressofauserisconguredmanually.Theswitchgenerates
theMFFusertablebylisteningtoARPpacketsonMFFuserports.
lDynamicmode:TheIPaddressandgatewayaddressofauserareallocatedthrough
DHCP .TheswitchgeneratestheMFFusertablebycapturingACKpacketsreturned
bytheDHCPserverandparsingtheoption3eld.
AnMFFusertablecanbeaddedmanually.
AgatewaycanbeconguredinaVLANforARPproxy,oraglobalgatewaycanbe
congured.WhenperformingARPproxy,thegatewayinanMFFentryispreferred
thantheintra-VLANgateway,andtheintra-VLANgatewayispreferredthantheglobal
gateway.ThegatewayaddresscanbeanIPaddressoraMACaddress.Ifthegateway
addressisanIPaddress,theswitchsendsanARPrequesttothegatewaytoobtainthe
MACaddress.IfthegatewayaddressisaMACaddress,theswitchdirectlyusesthe
MACaddressinARPresponses.Therefore,itisnecessarytomanuallycongureastatic
MACentrydirectingtothegatewayfortheswitch.
ConguringMFF
TheMFFcongurationincludesthefollowingcommands:
5-164
SJ-20130731155059-002|2013-11-27(R1.0)ZTEProprietaryandCondential