No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


CX11x, CX31x, CX710 (Earlier Than V6.03), and CX91x Series Switch Modules V100R001C10 Configuration Guide 13

The documents describe the configuration of various services supported by the CX11x&CX31x&CX91x series switch modules The description covers configuration examples and function configurations.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).


This section describes the applicable scenario of MFF.

MFF isolates users at Layer 2 and connects users at Layer 3 in a broadcast domain. MFF uses proxy ARP to capture ARP request packets and returns an ARP reply packet with the gateway MAC address as the source MAC address to users. All traffic from users is forwarded to the gateway so it can monitor the traffic and prevent attacks. In this way, the network security is ensured.

Figure 12-33 Layer 2 isolation by MFF

In Figure 12-33, user traffic is sent to the gateway but not to the Layer 2 aggregation node. Users are isolated at Layer 2.

Updated: 2019-12-13

Document ID: EDOC1000041694

Views: 61566

Downloads: 3623

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Previous Next