HP 6125G HP 6125G & 6125G/XG Blade Switches Security Configuration Gui - Page 270
Basic concepts, User port, Network port, Operation modes, Manual mode
View all HP 6125G manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 270 highlights
NOTE: An MFF-enabled device and a host cannot ping each other. Basic concepts A device with MFF enabled provides two types of ports: user port and network port. If you enable MFF for a VLAN, each port in the VLAN must be an MFF network or user port. Link aggregation is supported by network ports in an MFF-enabled VLAN, but is not supported by user ports in the VLAN. You can add network ports to link aggregation groups, but cannot add user ports to link aggregation groups. For more information about link aggregation, see Layer 2-LAN Switching Configuration Guide. User port An MFF user port is directly connected to a host and processes the following packets differently: • Allows DHCP packets and multicast packets to pass. • Delivers ARP packets to the CPU. • After learning gateways' MAC addresses, a user port allows only the unicast packets with the gateways' MAC addresses as the destination MAC addresses to pass. If no gateways' MAC addresses are learned, a user port discards all received unicast packets. Network port An MFF network port is connected to a networking device, such as an access switch, a distribution switch or a gateway. A network port processes the following packets differently: • Allows multicast packets and DHCP packets to pass. • Delivers ARP packets to the CPU. • Denies broadcast packets. You need to configure the following ports as network ports: • Upstream ports connected to a gateway • Ports connected to the downstream MFF devices in a cascaded network (a network with multiple MFF devices connected to one another) • Ports between devices in a ring network NOTE: A network port is not always an upstream port. Operation modes Manual mode The manual mode applies to the case where IP addresses are statically assigned to the hosts, and the hosts cannot obtain the gateway information through DHCP. A VLAN maintains only the MAC address of the default gateway. In manual mode, after receiving an ARP request for a host's MAC address from the gateway, the MFF device directly replies the host's MAC address to the gateway according to the ARP snooping entries. 260