FAQ-How Does the Firewall in Transparent Mode Process Unicast Packets with Unknown MAC Addresses

Publication Date:  2015-06-30 Views:  200 Downloads:  0
Issue Description
How Does the Firewall in Transparent Mode Process Unicast Packets with Unknown MAC Addresses?
Solution
The firewall in transparent mode processes a unicast packet with an unknown destination MAC address in any of the following modes:
  • ARP mode: The firewall discards the unicast packet and generates an ARP request packet with the source IP address, MAC address, and destination IP address of the unicast packet. Then the firewall sends the ARP request packet to all interfaces excluding the interface from which the firewall receives the unicast packet.
  • Flood mode: The firewall forwards the unicast packet to all interfaces excluding the interface from which the firewall receives the packet.
  • Drop mode: The firewall discards the unicast packet.
By default, the firewall processes unicast packets with unknown destination MAC addresses in flood mode.
  • Run the unknown-mac unicast arp command to configure the ARP mode.
  • Run the unknown-mac unicast flood command to configure the flood mode.
  • Run the unknown-mac unicast drop command to configure the drop mode.

END