Zte ZXR10 5250-52TC - Page 194

ZXR105250SeriesCongurationGuide
accessroutercompulsively.Thegatewaycanmonitortrafcandpreventattacksamong
users,whichimprovesnetworksecurity.
TherearetwotypesofMFFports:userportsandnetworkports.MFFuserportsare
connectedtoterminalusers.WhenreceivinganARPpacketfromauserport,theswitch
maintainsanMFFusertable,andreplieswitharesponse.MFFnetworkportsare
connectedtouplinkdevicesorgateways.
TherearetwoMFFoperationmodes:staticmodeanddynamicmode.
lStaticmode:TheIPaddressofauserisconguredmanually.Theswitchgenerates
theMFFusertablebylisteningtoARPpacketsonMFFuserports.
lDynamicmode:TheIPaddressandgatewayaddressofauserareallocatedthrough
DHCP .TheswitchgeneratestheMFFusertablebycapturingACKpacketsreturned
bytheDHCPserverandparsingtheoption3eld.
AnMFFusertablecanbeaddedmanually.
AgatewaycanbeconguredinaVLANforARPproxy,oraglobalgatewaycanbe
congured.WhenperformingARPproxy,thegatewayinanMFFentryispreferred
thantheintra-VLANgateway,andtheintra-VLANgatewayispreferredthantheglobal
gateway.ThegatewayaddresscanbeanIPaddressoraMACaddress.Ifthegateway
addressisanIPaddress,theswitchsendsanARPrequesttothegatewaytoobtainthe
MACaddress.IfthegatewayaddressisaMACaddress,theswitchdirectlyusesthe
MACaddressinARPresponses.Therefore,itisnecessarytomanuallycongureastatic
MACentrydirectingtothegatewayfortheswitch.
ConguringMFF
TheMFFcongurationincludesthefollowingcommands:
CommandFunction
zte(cfg)#setmffvlan<vlanlist>addport
<portlist>{userport|network}
SetstheMFFattributesforportsandVLANs.
zte(cfg)#setmffvlan<vlanlist>deleteport
<portlist>
DeletestheMFFattributesforportsandVLANs.
zte(cfg)#setmffvlan<vlanlist>gateway{ip|
mac}<address>
Setsanintra-VLANMFFgateway.
zte(cfg)#setmffuserip<ip-addr>mac
<mac-addr>vlan<vlan-id>gateway{ip|
mac}<address>
AddsanMFFuserentrymanually.
zte(cfg)#setmffgateway{ip|mac}<address>SetsaglobalMFFgateway.
zte(cfg)#setmffgateway-arp-keepaliveadd-port
{<portlist>|all}{timeout<value>}{enable|disable}
SetstheARPkeep-aliveparameterfortheMFF
gateway,andenablesordisablesthekeep-alive
function.
5-146
SJ-20131111172707-002|2013-11-27(R1.0)ZTEProprietaryandCondential