Configuration/Uplink Bridged Data Connections Help

To refresh the data displayed in the Bridge Connections table, click the Refresh button.

To create a bridge connection, click the Create button.

To remove a bridge connection, click the Delete button.

To modify the bridge connection, click the Modify button.

To add a path, click the Add Path button.

To show a path, click the Show Path button.

To enable IP statistics, click the Enable Statistics button. To disable IP statistics, click Disable Statistics.

Bridge Connections

Port

The selected port.

VLAN ID

Uplink bridges on the require a VLAN ID. There must be an uplink bridge with a VLAN ID to match any existing downlink bridges with VLAN IDs in order to pass traffic. All uplink bridges default to tagged and the VLAN ID is passed up to the network.

The Virtual LAN Identifier for the IP Interface. If the VLAN ID specified is non-zero, all traffic destined to this interface should be configured with this VLAN ID.

Default is 0.

S-Tag ID

Outer tag SLAN ID in Q-in-Q configurations.

Type

Logical bridge type.

Uplink 802.1Q: An uplink bridge uses one bridge interface in a VLAN as a default, and traffic from all other interfaces exits the system from this interface. As the default interface, packets entering the system on this interface do not have their source MAC addresses learned and associated with this interface. Traffic coming into this uplink interface is sent to the interface where the address has been learned. If the frame is a broadcast, it is filtered, unless it is an ARP or DHCP message that meets some special criteria. Unicasts received on an uplink port are forwarded to the downlink where the MAC address was learned.

Uplink bridge interfaces require an additional bridge-path configuration to set a default path for either a specific VLAN or globally for the system onto the uplink bridge. If an uplink is missing this configuration, traffic will not flow across the asymmetric VLAN. If RSTP (Rapid Spanning Tree Protocol, IEEE 802.1W) option is selected on two uplink bridge interfaces, it builds two links between device and uplink router. These two links are redundant to each other, if an active link fails, the redundant link will provide backup paths.

Downlink 802.1Q: A downlink bridge is used in conjunction with an uplink bridge. where the uplink bridge is the path upstream to the network, and the downlink bridge is the learning interface facing subscribers. Traffic coming into this interface is forwarded to the uplink regardless of the destination MAC address. Broadcasts and unicasts (known and unknown) will be sent out the default interface, which is the uplink bridge for the VLAN.

Packets entering the system on this interface have their source MAC addresses learned and associated with this interface. Because this interface is not a default, it is required to learn MAC addresses, so that frames from the network that come in on the uplink bridge can be sent to the correct downlink bridge. Broadcasts received on a downlink are sent to the uplink (default) without filtering. Broadcasts will not flow to other downlinks as long as forwardtodefault parameter is set to true. Downlink ports learn MAC addresses.

Intralink: An intralink bridge is used in conjunction with an uplink bridge, where the uplink bridge is the path upstream to the network, and the intralink forwards traffic with unknown MAC addresses or multicasts to the configured bridge interface without attempting to learn the addresses of the attached devices or network. Traffic coming into this interface is forwarded to the uplink regardless of the destination MAC address. Broadcasts, multicasts, and unicasts (known and unknown) will be sent out the default interface, which is the uplink bridge for the VLAN.

Packets entering the system on this interface will not have their source MAC addresses learned since this interface is not used when a MAC is known.

Intralink bridge interfaces require an additional configuration to take effect, which is a bridge-path. The bridge-path sets a default intralink path for either a specific VLAN or a global intralink for the system onto the intralink bridge. If an intralink is missing this configuration, traffic will not flow across the asymmetric VLAN.

Rlink:This is the enhance version of RSTP bridge (i.e Uplink bridge with RSTP option). With the RSTP rlink, instead of having a second redundant cloud link at each device in RSTP, it allows traffic to proceed through the other device, which has its own uplink bridge. In that case, those two devices are redundant to each other, if an active uplink fails on one device, the another device will provide backup uplink.  

Transparent LAN Service: Transparent LAN Service (TLS): A TLS bridge is used with only other TLS bridges. This should not be used with any asymmetrical bridges. TLS bridges learn MAC addresses and forward packets to learned destinations. Broadcasts and unknown unicasts are flooded out all interfaces except the ingress interface.

Packets entering the system on TLS interface have their source MAC addresses learned and associated with the interface so that frames from the network that come in on other TLS bridges in the VLAN can be sent to the correct interface.

Wire: Wire bridge interfaces, which are a reserved TLS bridge, have the same behavior regardless of the ports being bridged. A wire bridge is only connected to another wire bridge in a two bridge interface configuration and reserves a VLAN ID for two ports for the entire system.

Transparent LAN Service: A TLS bridge is used with only other TLS bridges. This should not be used with any asymmetrical bridges. TLS bridges learn MAC addresses and forward packets to learned destinations. Broadcasts and unknown unicasts are flooded out all interfaces except the ingress interface.

Packets entering the system on TLS interface have their source MAC addresses learned and associated with the interface so that frames from the network that come in on other TLS bridges in the VLAN can be sent to the correct interface.

Transparent 802.1D: Transparent bridges send broadcasts to all ports, learn an unlimited number of MAC addresses on a port, and allow any port to send traffic to any other port.

Ingress Rule-Group

The index number for packet-rule-record(s) when adding multiple filters for ingress interfaces.

Egress Rule-Group

The index number for packet-rule-record(s) when adding multiple filters for egress interfaces.

Statistics Enabled

Whether on-demand stats collection for this bridge interface.

RSTP

Whether RSTP is enabled. RSTP (802.1W) is an evolution of the Spanning Tree Protocol (STP, IEEE 802.1D). STP links network segments and eliminates one of the difficulties of configuring bridge topologies - bridge loops. There still can only be one active path. Once RSTP is configured for a bridged network the Spanning Tree Algorithm (STA) analyzes the network and determines which links should be active or not. The STA defines the links by configuring the ports.

In the bridged network the root bridge is selected. The STA sends out messages - Bridge Protocol Data Units (BPDU) - to determine the least cost path to the root bridge. From this analysis the port roles are determined.

Strip and Insert

Defines how VLAN tags are stripped and inserted as they traverse the ingress and egress of the device.

The untagged bridge set the strip & insert parameter to TRUE, the tagged bridge set the strip & insert parameter to FALSE. When the strip & insert parameter is set to true, the VLAN ID is stripped and inserted, when the strip & insert parameter is set to FALSE, the VLAN ID remains and is passed on untouched.

Default is false.

Send ARP Requests

Enables ARP broadcast support. When the device receives a broadcast frame it checks to see if it is an ARP protocol packet by looking up an IP address in a database which maintains learned IP addresses. If the packet is an ARP packet, the device compares and filters the requested IP address with the current forwarding table. When a match is found, the ARP broadcast is forwarded out the interface with the appropriate host.

The host then replies to the ARP with a standard response. If a match is not found, the ARP is filtered and is dropped.

Default is false.

Discard Non-ARP Broadcast

Enables the filtering that will not propagate broadcasts send from the upstream down to the device. Ports configured as uplinks will send broadcasts upstream.

Default is false.

IP Address Learning

If true, snoop unicast packets to build ARP table.

Default is false.

Unicast Address Learning

If true, snoop unicast packets to build MAC paths.

Default is false.

Maximum Unicast

Maximum number of unicast addresses for interface.

Default is false.

Multicast Address Learning

If true, snoop multicast packets for IGMP joins/leaves.

Default is false.

Forward Via Unicast Paths

If true, attempt to forward via unicast MAC paths.

Default is fault.

Forward Via Multicast Paths

If true, attempt to forward via multicast MAC paths.

Default is false.

Forward Via Default Paths

If true, attempt to forward via VLAN default paths.

Default is false.

Custom DHCP

If TRUE, forwards broadcast DHCPOFFER or DHCPACK packets even if bridgeFilterBroadcast is TRUE for that interface.

Default is false.

Flood Unknown

 

Provides the ability to toggle the flooding of unknown unicast destination frames.

When set to True, the device always forwards frames with an unknown unicast MAC if the bridge is set for forward to unicast .

When set to False, the device always discards frames with an unknown unicast MAC if the bridge is set for forward to unicast . Any frame that does not find a match in the forwarding table will be discarded.

For uplink bridges, the default settings for this parameter is false.

Flood Multicast

Allows the device to flood all multicast traffic received on a bridge out to all other ports in the VLAN . By default, this parameter is set to false for all bridge types.

Dynamic Filtering

Enables/disables a dynamic IP filter on downlink bridges to prevent users with a statically configured IP address from bypassing DHCP security enforcement. This filter blocks users from accessing the network using anything other than valid DHCP offered IP address.

DHCP Learn

The type of learning on DHCP server.

Values:

none: IP address and Mac address are not learned from DHCP packets.

mac: MAC addresses are learned from DHCP packets.

ip : IP addresses are learned from DHCP packets.

VLAN ID CoS

The Class-Of-Service (COS) value used for VLAN Tag Insertion.

Default is 0.

Outgoing CoS Option

Determines COS setting on packets bridged out this interface

disable - COS setting is untouched.

all - COS will be set to Outgoing COS Value.

Defalut is disable

Outgoing COS Value

The COS value loaded into outgoing tagged packets.

Applicable only if interface sends tagged packets and Outgoing CoS Option is all.

S-Tag TPID

The value of the tag protocol identifier that is being used for QinQ packets.

Default is 0x8100

S-Tag StripAndInsert

If true, enable S-tag tagging on this interface.

Default is false.

S-Tag Outgoing CoS Option

Determines s-tag COS settings on packets bridged out this interface:

disable - s-tag COS setting just passed as Rxed.

all - s-tag COS will be set with S-Tag Outgoing CoS Option.

Default is disable

S-Tag CoS

The s-tag COS to be used when doing s-tag insertion.

Default is 0

S-Tag Outgoing CoS Value

 

The s-tag COS value loaded into outgoing tagged packets.

Applicable only if interface sends S-tagged packets and S-Tag Outgoing CoS Option is All.

Default is 0

July 30, 2013