1 .TH BRIDGE 8 "1 August 2012" "iproute2" "Linux"
3 bridge \- show / manipulate bridge addresses and devices
10 .RI "[ " OPTIONS " ] " OBJECT " { " COMMAND " | "
16 .BR link " | " fdb " | " mdb " | " vlan " | " monitor " }"
21 \fB\-V\fR[\fIersion\fR] |
22 \fB\-s\fR[\fItatistics\fR] }
35 .BR guard " { " on " | " off " } ] [ "
36 .BR hairpin " { " on " | " off " } ] [ "
37 .BR fastleave " { " on " | " off " } ] [ "
38 .BR root_block " { " on " | " off " } ] [ "
39 .BR hwmode " { " vepa " | " veb " } ] "
42 .BR "bridge link" " [ " show " ] [ "
47 .BR "bridge fdb" " { " add " | " append " | " del " } "
51 .BR local " | " temp " } { "
52 .BR self " } { " embedded " } { " router " } [ "
63 .BR "bridge fdb" " [ " show " ] [ "
68 .BR "bridge mdb" " { " add " | " del " } "
75 .BR permanent " | " temp " ]"
78 .BR "bridge mdb show " [ "
83 .BR "bridge vlan" " { " add " | " del " } "
88 .BR pvid " ] [ " untagged " ] [ "
89 .BR self " ] [ " master " ] "
92 .BR "bridge vlan" " [ " show " ] [ "
97 .BR "bridge monitor" " [ " all " | " neigh " | " link " | " mdb " ]"
102 .BR "\-V" , " -Version"
103 print the version of the
108 .BR "\-s" , " \-stats", " \-statistics"
109 output more information. If this option
110 is given multiple times, the amount of information increases.
111 As a rule, the information is statistics or some time values.
114 .SH BRIDGE - COMMAND SYNTAX
125 - Forwarding Database entry.
129 - Multicast group database entry.
138 Specifies the action to perform on the object.
139 The set of possible actions depends on the object type.
140 As a rule, it is possible to
141 .BR "add" , " delete"
146 ) objects, but some objects do not allow all of these operations
147 or have some additional commands. The
149 command is available for all objects. It prints
150 out a list of available commands and argument syntax conventions.
152 If no command is given, some default command is assumed.
155 or, if the objects of this class cannot be listed,
158 .SH bridge link - bridge port
161 objects correspond to the port devices of the bridge.
164 The corresponding commands set and display port status and bridge specific
167 .SS bridge link set - set bridge specific attributes on a port
171 interface name of the bridge port
175 the STP path cost of the specified port.
178 .BI priority " PRIO "
179 the STP port priority. The priority value is an unsigned 8-bit quantity
180 (number between 0 and 255). This metric is used in the designated port an
181 droot port selectio algorithms.
185 the operation state of the port. This is primarily used by user space STP/RSTP
186 implementation. The following is a list of valid values:
189 - port is DISABLED. Make this port completely inactive.
193 - STP LISTENING state. Only valid if STP is enabled on the brige. In this
194 state the port for list for STP BPDUs and drop all other traffic.
198 - STP LEARNING state. Only valid if STP is enabled on the bridge. In this
199 state the port will accept traffic only for the purpose of updating MAC
204 - STP FORWARDING state. Port is fully active.
208 - STP BLOCKING state. Only valid if STP is enabled on the bridge. This state
209 is used during the STP election process. In this state, port will only process
214 .BR "guard on " or " guard off "
215 Controls whether STP BPUDs will be processed by the bridge port. By default,
216 the flag is turned off allowed BPDU processing. Turning this flag on will
217 cause the port to stop processing STP BPDUs.
220 .BR "hairpin on " or " hairpin off "
221 Controls whether traffic may be send back out of the port on which it was
222 received. By default, this flag is turned off and the bridge will not forward
223 traffic back out of the receiving port.
226 .BR "fastleave on " or " fastleave off "
227 This flag allows the bridge to immediately stop multicast traffic on a port
228 that receives IGMP Leave message. It is only used with IGMP snooping is
229 enabled on the bridge. By default the flag is off.
232 .BR "root_block on " or " root_block off "
233 Controls whether a given port is allowed to become root port or not. Only used
234 when STP is enabled on the bridge. By default the flag is off.
238 Some network interface cards support HW bridge functionality and they may be
239 configured in different modes. Currently support modes are:
242 - Data sent between HW ports is sent on the wire to the external
246 - bridging happens in hardware.
248 .SS bridge link show - list bridge port configuration.
250 This command displays the current bridge port configuration and flags.
252 .SH bridge fdb - forwarding database management
255 objects contain known Ethernet addresses on a link.
258 The corresponding commands display fdb entries, add new entries,
262 .SS bridge fdb add - add a new fdb entry
264 This command creates a new fdb entry.
268 the Ethernet MAC address.
272 the interface to which this address is associated.
275 - the address is associated with a software fdb (default)
279 - the address is associated with an offloaded fdb
283 - the destination address is associated with a router.
284 Valid if the referenced device is a VXLAN type device and has
285 route shortcircuit enabled.
289 The next command line parameters apply only
290 when the specified device
295 the IP address of the destination
296 VXLAN tunnel endpoint where the Ethernet MAC ADDRESS resides.
300 the VXLAN VNI Network Identifier (or VXLAN Segment ID)
301 to use to connect to the remote VXLAN tunnel endpoint.
302 If omitted the value specified at vxlan device creation
307 the UDP destination PORT number to use to connect to the
308 remote VXLAN tunnel endpoint.
309 If omitted the default value is used.
313 device name of the outgoing interface for the
314 VXLAN device driver to reach the
315 remote VXLAN tunnel endpoint.
317 .SS bridge fdb append - append a forwarding database entry
318 This command adds a new fdb entry with an already known
320 Valid only for multicast link layer addresses.
321 The command adds support for broadcast and multicast
322 Ethernet MAC addresses.
323 The Ethernet MAC address is added multiple times into
324 the forwarding database and the vxlan device driver
325 sends a copy of the data packet to each entry found.
328 The arguments are the same as with
329 .BR "bridge fdb add" ,
331 .SS bridge fdb delete - delete a forwarding database entry
332 This command removes an existing fdb entry.
335 The arguments are the same as with
336 .BR "bridge fdb add" ,
338 .SS bridge fdb show - list forwarding entries.
340 This command displays the current forwarding table.
345 option, the command becomes verbose. It prints out the last updated
346 and last used time for each entry.
348 .SH bridge mdb - multicast group database management
351 objects contain known IP multicast group addresses on a link.
354 The corresponding commands display mdb entries, add new entries,
357 .SS bridge mdb add - add a new multicast group database entry
359 This command creates a new mdb entry.
363 the interface where this group address is associated.
367 the port whose link is known to have members of this multicast group.
371 the IP multicast group address whose members reside on the link connected to
375 - the mdb entry is permanent
379 - the mdb entry is temporary (default)
383 .SS bridge mdb delete - delete a multicast group database entry
384 This command removes an existing mdb entry.
387 The arguments are the same as with
388 .BR "bridge mdb add" .
390 .SS bridge mdb show - list multicast group database entries
392 This command displays the current multicast group membership table. The table
393 is populated by IGMP and MLD snooping in the bridge driver automatically. It
398 commands manually too.
402 the interface only whose entries should be listed. Default is to list all
408 option, the command becomes verbose. It prints out the ports known to have
411 .SH bridge vlan - VLAN filter list
414 objects contain known VLAN IDs for a link.
417 The corresponding commands display vlan filter entries, add new entries,
420 .SS bridge vlan add - add a new vlan filter entry
422 This command creates a new vlan filter entry.
426 the interface with which this vlan is associated.
430 the VLAN ID that identifies the vlan.
434 the vlan specified is to be considered a PVID at ingress.
435 Any untagged frames will be assigned to this VLAN.
439 the vlan specified is to be treated as untagged on egress.
443 the vlan is configured on the specified physical device. Required if the
444 device is the bridge device.
448 the vlan is configured on the software bridge (default).
450 .SS bridge vlan delete - delete a forwarding database entry
451 This command removes an existing fdb entry.
454 The arguments are the same as with
455 .BR "bridge vlan add".
457 .BR "pvid " and " untagged"
460 .SS bridge vlan show - list vlan configuration.
462 This command displays the current VLAN filter table.
464 .SH bridge monitor - state monitoring
468 utility can monitor the state of devices and addresses
469 continuously. This option has a slightly different format.
472 command is the first in the command line and then the object list follows:
474 .BR "bridge monitor" " [ " all " |"
478 is the list of object types that we want to monitor.
480 .BR link ", " fdb ", and " mdb "."
485 opens RTNETLINK, listens on it and dumps state changes in the format
486 described in previous sections.
489 If a file name is given, it does not listen on RTNETLINK,
490 but opens the file containing RTNETLINK messages saved in binary format
491 and dumps them. Such a history file can be generated with the
495 This command uses facilities added in Linux 3.0.
497 Although the forwarding table is maintained on a per-bridge device basis
498 the bridge device is not part of the syntax. This is a limitation of the
499 underlying netlink neighbour message protocol. When displaying the
500 forwarding table, entries for all bridges are displayed.
501 Add/delete/modify commands determine the underlying bridge device
502 based on the bridge to which the corresponding ethernet device is attached.
508 .RB "Please direct bugreports and patches to: " <netdev@vger.kernel.org>
511 Original Manpage by Stephen Hemminger