Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document.
Note: Even the most advanced machine translation cannot match the quality of professional translators.
Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Ensuring Data Integrity
Context
During traffic distribution, devices should not modify packets before the packets reach the packet analysis server in order to ensure the accuracy of traffic analysis.
The function of ensuring data integrity applies to both IPv4 and IPv6 packets.
After a device is configured to ensure data integrity, the device can only perform Layer 3 forwarding but cannot perform Layer 2 forwarding. Therefore, it is recommended that you configure traffic distribution on a switch where no other features are configured to avoid the failure of features that use Layer 2 forwarding.
Procedure
- Configure a VLANIF interface on a device to ignore MAC address check during Layer 3 forwarding.
Specify a VLANIF interface.
- Run the system-view command to enter the system view.
- Run the interface vlanif vlan-id command to enter the VLANIF interface view.
- Run the ip forward-mode dstmac-independent command to configure the VLANIF interface to ignore MAC address check for IP packets.
Batch specify VLANIF interfaces.
- Run the system-view command to enter the system view.
- Run the ip forward-mode dstmac-independent interface vlanif { vlan-id1 [ to vlan-id2 ] } &<1-10> command to configure a batch of VLANIF interfaces to ignore MAC address check for IP packets.
- Disable the device from replacing the source and destination MAC addresses of IP packets during Layer 3 forwarding.
- Run the system-view command to enter the system view.
- Run the ip forwarding mac-unvaried command to disable the device from replacing the source and destination MAC addresses of IP packets.
- Keep the TTL value unchanged.
- Run the set ttl unvaried command to configure the device to retain the TTL value of IP packets.
The function of keeping the TTL value unchanged is available only for inbound interfaces.
- Run the set ttl unvaried command to configure the device to retain the TTL value of IP packets.