 This provides security at Layer 2 since no traffic is able to pass directly between the hosts.MACFF is suitable for Ethernet networks where a layer 2 bridging device, known as an Ethernet Access Node (EAN), connects Access Routers to their clients.MACFF is configured on the EANs.