\fB\-o\fR[\fIneline\fr] }
.ti -8
-.BR "bridge link set"
+.B "bridge link set"
.B dev
-.IR DEV
-.IR " [ "
+.IR DEV " [ "
.B cost
.IR COST " ] [ "
.B priority
.IR DEV " { "
.BR local " | " static " | " dynamic " } [ "
.BR self " ] [ " master " ] [ " router " ] [ " use " ] [ " extern_learn " ] [ " sticky " ] [ "
+.B src_vni
+.IR VNI " ] { ["
.B dst
.IR IPADDR " ] [ "
-.B src_vni
-.IR VNI " ] ["
.B vni
.IR VNI " ] ["
.B port
.IR PORT " ] ["
.B via
-.IR DEVICE " ]"
+.IR DEVICE " ] | "
+.B nhid
+.IR NHID " } "
.ti -8
-.BR "bridge fdb" " [ " show " ] [ "
-.B dev
-.IR DEV " ] [ "
+.BR "bridge fdb" " [ [ " show " ] [ "
.B br
.IR BRDEV " ] [ "
.B brport
.B vlan
.IR VID " ] [ "
.B state
-.IR STATE " ]"
+.IR STATE " ] ["
+.B dynamic
+.IR "] ]"
.ti -8
-.B bridge fdb get
-.I LLADDR " [ "
-.B dev
-.IR DEV " ] [ "
+.BR "bridge fdb get" " ["
+.B to
+.IR "]"
+.I LLADDR "[ "
.B br
-.IR BRDEV " ] [ "
+.IR BRDEV " ]"
+.B { brport | dev }
+.IR DEV " [ "
.B vlan
-.IR VID " ] ["
-.BR self " ] [ " master " ]"
+.IR VID " ] [ "
+.B vni
+.IR VNI " ] ["
+.BR self " ] [ " master " ] [ " dynamic " ]"
.ti -8
.BR "bridge mdb" " { " add " | " del " } "
.B dev
-.IR DEV
+.I DEV
.B port
-.IR PORT
+.I PORT
.B grp
.IR GROUP " [ "
.BR permanent " | " temp " ] [ "
.ti -8
.BR "bridge vlan" " { " add " | " del " } "
.B dev
-.IR DEV
+.I DEV
.B vid
.IR VID " [ "
-.BR tunnel_info
+.B tunnel_info
.IR TUNNEL_ID " ] [ "
.BR pvid " ] [ " untagged " ] [ "
.BR self " ] [ " master " ] "
Actually it just simplifies executing of:
.B ip netns exec
-.IR NETNS
+.I NETNS
.B bridge
.RI "[ " OPTIONS " ] " OBJECT " { " COMMAND " | "
.BR help " }"
First failure will cause termination of bridge command.
.TP
-.BR "\-force"
+.B "\-force"
Don't terminate bridge command on errors in batch mode.
If there were any errors during execution of the commands, the application
return code will be non zero.
.BI priority " PRIO "
the STP port priority. The priority value is an unsigned 8-bit quantity
(number between 0 and 255). This metric is used in the designated port an
-droot port selectio algorithms.
+droot port selection algorithms.
.TP
.BI state " STATE "
-the operation state of the port. Except state 0 (disabled),
+the operation state of the port. Except state 0 (disable STP or BPDU filter feature),
this is primarily used by user space STP/RSTP
-implementation. One may enter a lowercased port state name, or one of the
+implementation. One may enter port state name (case insensitive), or one of the
numbers below. Negative inputs are ignored, and unrecognized names return an
error.
.B 0
-- port is in
+- port is in STP
.B DISABLED
-state. Make this port completely inactive. This is also called
+state. Make this port completely inactive for STP. This is also called
BPDU filter and could be used to disable STP on an untrusted port, like
a leaf virtual devices.
.sp
.B 1
-- STP
+- port is in STP
.B LISTENING
state. Only valid if STP is enabled on the bridge. In this
state the port listens for STP BPDUs and drops all other traffic frames.
.sp
.B 2
-- STP
+- port is in STP
.B LEARNING
state. Only valid if STP is enabled on the bridge. In this
state the port will accept traffic only for the purpose of updating MAC
.sp
.B 3
-- STP
+- port is in STP
.B FORWARDING
state. Port is fully active.
.sp
.B 4
-- STP
+- port is in STP
.B BLOCKING
state. Only valid if STP is enabled on the bridge. This state
is used during the STP election process. In this state, port will only process
Controls whether a given port will flood unicast traffic for which there is no FDB entry. By default this flag is on.
.TP
-.BI hwmode
+.B hwmode
Some network interface cards support HW bridge functionality and they may be
configured in different modes. Currently support modes are:
This is done by copying the packet per host and
changing the multicast destination MAC to a unicast one accordingly.
-.BR mcast_to_unicast
+.B mcast_to_unicast
works on top of the multicast snooping feature of
the bridge. Which means unicast copies are only delivered to hosts which
are interested in it and signalized this via IGMP/MLD reports
overcome by the network daemon (supplicant) enabling AP isolation and
by that separating all STAs.
-Delivery of STA-to-STA IP mulitcast is made possible again by
+Delivery of STA-to-STA IP multicast is made possible again by
enabling and utilizing the bridge hairpin mode, which considers the
incoming port as a potential outgoing port, too (see
.B hairpin
configured backup port
.TP
-.BR nobackup_port
+.B nobackup_port
Removes the currently configured backup port
.TP
-.BI self
+.B self
link setting is configured on specified physical device
.TP
-.BI master
+.B master
link setting is configured on the software bridge (default)
.TP
This command creates a new fdb entry.
.TP
-.BI "LLADDR"
+.B LLADDR
the Ethernet MAC address.
.TP
.B router
- the destination address is associated with a router.
Valid if the referenced device is a VXLAN type device and has
-route shortcircuit enabled.
+route short circuit enabled.
.sp
.B use
VXLAN device driver to reach the
remote VXLAN tunnel endpoint.
+.TP
+.BI nhid " NHID "
+ecmp nexthop group for the VXLAN device driver
+to reach remote VXLAN tunnel endpoints.
+
.SS bridge fdb append - append a forwarding database entry
This command adds a new fdb entry with an already known
.IR LLADDR .
lookup a bridge forwarding table entry.
.TP
-.BI "LLADDR"
+.B LLADDR
the Ethernet MAC address.
.TP
bridge ports with vlan_tunnel flag set).
.TP
-.BI pvid
+.B pvid
the vlan specified is to be considered a PVID at ingress.
Any untagged frames will be assigned to this VLAN.
.TP
-.BI untagged
+.B untagged
the vlan specified is to be treated as untagged on egress.
.TP
-.BI self
+.B self
the vlan is configured on the specified physical device. Required if the
device is the bridge device.
.TP
-.BI master
+.B master
the vlan is configured on the software bridge (default).
.SS bridge vlan delete - delete a vlan filter entry