In earlier versions of V200R001, the switch limits only the rate of ARP packets destined to the switch. Therefore, the switch does not limit the rate of ARP packets processed by the MFF module (ARP packets destined to other devices).
In V200R001 and later versions, the switch checks the VLAN ID in the ARP packet to determine whether MFF is enabled in the VLAN. If MFF is enabled in the VLAN, the switch limits the rate of the ARP packet and then the MFF module processes the ARP packet.