mac-forced-forwarding enable

Usage Scenario

Many networks require that the gateway monitor data traffic and isolate users. MFF isolates users at Layer 2 and connects users at Layer 3 on the same network segment. MFF enables traffic to be forwarded through the gateway. This implements traffic monitoring and accounting and ensures network security.

Precautions

You can run the mac-forced-forwarding enable command in the VLAN view and perform other configurations only after you enable MFF globally in the system view.

After MFF is disabled in the system view, other MFF configurations are automatically deleted.

MFF cannot be enabled in a VLAN where the super VLAN or VLANIF interface is configured.

MFF cannot be enabled in a sub-VLAN where the super VLAN and VLANIF interface are configured.

The MFF function is implemented based on ARP proxy, whereas the EAI function is implemented based on ARP request packet forwarding. Therefore, the two functions conflict with each other. If you have enabled both MFF and EAI in the same VLAN, the MFF function takes effect.

When you enable MFF, if ACL resources are insufficient, the MFF function does not take effect.

MFF cannot be configured in the super-VLAN.

When DHCP relay is configured in a super VLAN, MFF cannot be enabled in its sub-VLANs.