ZXR10 5900/5200 Series User Manual (Basic Configuration Volume)
ited speed as X(1-100), switch will receive at most X ARP packets
every second, the additional are discarded.
MFF Configuration
MFF Overview
MFF MAC-Forced Forwarding mainly implements layer 2 isolation
and layer 3 intercommunication among different client hosts in
the same broadcast domain. MFF blocks user ARP request packet
and reply response packet of gateway MAC address by ARP an-
swer-agent mechanism. This way can force user to send all traf-
fic (includes traffic in the same subnet) to gateway, which makes
gateway monitor data flow, prevent malicious attack among users
and ensure safety of network deployment.
MFF supports manual and automatic modes. Manual mode is ap-
plied in user static IP address configuration scene.
Automatic
mode is used in user dynamically getting IP address by DHCP pro-
tocol scene.
Configuring MFF
1. To set MFF mode, use the following commands.
Step Command
Function
1
ZXR10(config)#
mff mode
{
auto
|
manus
}
This configures MFF manual
mode or automatic modes.
2
ZXR10(config)#
no mff mode
This cancels MFF mode
configuration.
2. To enable MFF function, use the following command.
Step Command
Function
1
ZXR10(config-if-vlanX)#
mff enable
This enables MFF function in
VLAN interface.
2
ZXR10(config-if-vlanX)#
no mff mode
This disables MFF function in
VLAN interface.
3. To configure MFF interface type, use the following command.
180
Confidential and Proprietary Information of ZTE CORPORATION
