mac-forced-forwarding ipv6-isolate

Function

The mac-forced-forwarding ipv6-isolate command configures the user-side inbound interface on a device to discard IPv6 packets.

The undo mac-forced-forwarding ipv6-isolate command disables a device from discarding IPv6 packets from users.

By default, the user-side inbound interface on a device does not discard IPv6 packets from users.

Format

mac-forced-forwarding ipv6-isolate

undo mac-forced-forwarding ipv6-isolate

Parameters

None.

Views

VLAN view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

After the mac-forced-forwarding ipv6-isolate command is used, the user-side inbound interface on a device discards the IPv6 packets from users to prevent IPv6 packets from being broadcast on the VLAN. If the device does not discard IPv6 packets, users can learn the MAC addresses of each other, which makes MFF user isolation function invalid.

Prerequisites

The MFF function has been enabled in the system view and the VLAN view.

The VLAN contains at least one network-side interface.

Example

# Configure the user-side inbound interface on a device to discard IPv6 packets from users.

<HUAWEI> system-view
[HUAWEI] vlan 100
[HUAWEI-vlan100] mac-forced-forwarding enable
[HUAWEI-vlan100] mac-forced-forwarding ipv6-isolate