User's Manual

Table Of Contents
357
Users Manual of CS-6306R
36.1.1.2 Enabling MACFF in VLAN
If MACFF is enabled in a VLAN, the DHCP packets which are received from all DHCP-snooping untrusted
physical ports in a VLAN will be legally checked.
If the destination IP address is the IP address of any DHCP client, on which the physical port that receives the
ARP packets is located, these ARP packets will be dropped; if these are ARP response packets, these
packets will also be dropped.
The VLAN on which MACFF is enabled must be configured to have a management
address. DHCP snooping shall also be enabled on this VLAN.
Run the following commands in global configuration mode.
Command Purpose
macffvlanvlan_id enable
Enables MACFF in a VLAN.
no macffvlanvlan_id enable
Disables MACFF in a VLAN.
36.1.1.3 Configuring the Default AR of MACFF in VLAN
When you set the address on client manually, the switch shall automatically enables default AR as the
MACFF-specified default gateway. There is only one default AR.
Run the following commands in global configuration mode.
Command Purpose
macffvlanvlan_id default-ar A.B.C.D
Sets the default AR of MACFF in VLAN.
no macff vlan vlan_id default-ar A.B.C.D
Deletes the default AR of MACFF in VLAN.
Before configuring this command, you can run ip source binding
xx-xx-xx-xx-xx-xxA.B.C.D interface nameto add the client binding table on the
switch. If you do not do this, MACFF will regard the manually configured client as
illegal client and MACFF will not serve this client.
36.1.1.4 Configuring Other ARs of MACFF in VLAN
After other ARs of MACFF are configured, MACFF allows DHCP client to access these ARs directly without
forwarding packets via the default gateway allocated by DHCP server.
This function can be applied on some servers in the network segment of client or on other service addresses.
Run the following commands in global configuration mode.
Command Purpose
macffvlanvlan_idother_ar A.B.C.D
Configures other ARs of MACFF in VLAN.
no macffvlanvlan_id other_ar A.B.C.D
Deletes other ARs of MACFF in VLAN.