Zte ZXR10 5900 Series - MFF Configuration Example

Chapter17SecurityConguration
Step
CommandFunction
1
ZXR10(config-gei_1/x)#setmff{user-port|
network-port}
Thissetslayer2physical
interfaceasMFFuserinterface
ornetworkinterface.
2
ZXR10(config-gei_1/x)#nosetmffThiscancelsMFFinterface
type.
4.TocongureMFFgatewayIPaddress,usethefollowingcom-
mand.
Step
CommandFunction
1
ZXR10(config-if-vlanX)#setmffgatewayip
<A.B.C.D>
ThisconguresMFFgateway
IPaddressinVLANbymanual
mode.
2
ZXR10(config-if-vlanX)#nosetmffgatewayip
ThiscancelsMFFgatewayIP
address.
5.TocongureMFFuserstatically,usethefollowingcommand.
Step
CommandFunction
1
ZXR10(config)#mffuser<A.B.C.D><H.H.H>vlan
<1-4094>gateway<A.B.C.D>
ThisconguresMFFuser
staticallyinmanualmode.
2
ZXR10(config)#nomffuser<A.B.C.D>vlan<1-4094>
Thisclearsstatically
conguredMFFuser .
6.ToenableMFFgatewayMACaddressdetectionfunction,use
thefollowingcommands.
Step
CommandFunction
1
ZXR10(config)#mffgatewaydetectenable
ThisenablesMFFgateway
MACaddressdetection
function.
2
ZXR10(config)#mffgatewaydetectdisable
ThisdisablesMFFgateway
MACaddressdetection
function.
MFFConfigurationExample
AsshowninFigure41,R1isMFFgateway.PC1obtainsIPaddress
throughDHCP .DHCPSNOOPINGandMFFareconguredonswitch
CondentialandProprietaryInformationofZTECORPORATION181