Manual-mode MFF configuration example in a ring network

As shown in Figure 156, all the devices are in VLAN 100, and the switches form a ring. Hosts A, B, and C are assigned IP addresses manually.

Configure MFF to isolate the hosts at Layer 2 and allow them to communicate with each other through the gateway at Layer 3.

1. Configure the IP addresses of the hosts and the gateway, as in shown in Figure 156.

2. Configure Switch A:

   # Enable STP globally to make sure STP is enabled on interfaces.

   [SwitchA] stp global enable
   

   # Configure manual-mode MFF on VLAN 100.

   [SwitchA] vlan 100
   [SwitchA-vlan100] mac-forced-forwarding default-gateway 10.1.1.100
   

   # Specify the IP address of the server.

   [SwitchA-vlan100] mac-forced-forwarding server 10.1.1.200
   

   # Enable ARP snooping on VLAN 100.

   [SwitchA-vlan100] arp snooping enable
   [SwitchA-vlan100] quit
   

   # Configure GigabitEthernet 1/0/2 and GigabitEthernet 1/0/3 as network ports.

   [SwitchA] interface gigabitethernet 1/0/2
   [SwitchA-GigabitEthernet1/0/2] mac-forced-forwarding network-port
   [SwitchA-GigabitEthernet1/0/2] quit
   [SwitchA] interface gigabitethernet 1/0/3
   [SwitchA-GigabitEthernet1/0/3] mac-forced-forwarding network-port
   

3. Configure Switch B:

   # Enable STP globally to make sure STP is enabled on interfaces.

   [SwitchB] stp global enable
   

   # Configure manual-mode MFF on VLAN 100.

   [SwitchB] vlan 100
   [SwitchB-vlan100] mac-forced-forwarding default-gateway 10.1.1.100
   

   # Specify the IP address of the server.

   [SwitchB-vlan100] mac-forced-forwarding server 10.1.1.200
   

   # Enable ARP snooping on VLAN 100.

   [SwitchB-vlan100] arp snooping enable
   [SwitchB-vlan100] quit
   

   # Configure GigabitEthernet 1/0/1 and GigabitEthernet 1/0/3 as network ports.

   [SwitchB] interface gigabitethernet 1/0/1
   [SwitchB-GigabitEthernet1/0/1] mac-forced-forwarding network-port
   [SwitchB-GigabitEthernet1/0/1] quit
   [SwitchB] interface gigabitethernet 1/0/3
   [SwitchB-GigabitEthernet1/0/3] mac-forced-forwarding network-port
   

4. Enable STP on Switch C globally to make sure STP is enabled on interfaces.

   <SwitchC> system-view
   [SwitchC] stp global enable