HP VPN Firewall Appliances Network Management Configuration Guide

136
Configuring Layer 2 forwarding
Layer 2 forwarding includes the following categories:
• Normal
• Inline
• Inter-VLAN
Configuring normal Layer 2 forwarding
Normal Layer 2 forwarding can be configured only at the CLI.
If the destination MAC address of an incoming packet matches the MAC address of the receiving Layer
3 interface, the device forwards the packet through that interface. If not, the device performs normal
Layer 2 forwarding through a Layer 2 interface. The device looks up the MAC address table according
to the destination MAC address of the incoming packet, obtains the outgoing interface, and then
forwards the packet through the interface.
Configuration procedure
Normal Layer 2 forwarding is enabled by default.
Displaying and maintaining normal Layer 2 forwarding
Task Command Remarks
Display normal and inline Layer 2
forwarding statistics.
display mac-forwarding statistics [ interface
interface-type interface-number ] [ | { begin |
exclude | include } regular-expression ]
Available in any view.
Clear all normal and inline Layer 2
forwarding statistics.
reset mac-forwarding statistics Available in user view.
Configuring inline Layer 2 forwarding
The inline Layer 2 forwarding feature is supported on the high-end firewall series, and includes the
following types:
• Forward type—A packet coming from one interface goes out of another. The packet is forwarded
through the specified incoming and outgoing interfaces, rather than through looking up the MAC
address table. A complete configuration contains an ID, which uniquely identifies an inline Layer 2
forwarding entry, and two interfaces.
• Reflect type—A packet is forwarded through the interface that received the packet. A complete
configuration contains an ID, which uniquely identifies an inline Layer 2 forwarding entry, and one
interface.