1178 lines
24 KiB
HTML
1178 lines
24 KiB
HTML
|
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
|
<HTML><HEAD><TITLE>Man page of BRIDGE</TITLE>
|
|
</HEAD><BODY>
|
|
<H1>BRIDGE</H1>
|
|
Section: Linux (8)<BR>Updated: 1 August 2012<BR><A HREF="#index">Index</A>
|
|
<A HREF="/cgi-bin/man/man2html">Return to Main Contents</A><HR>
|
|
|
|
<A NAME="lbAB"> </A>
|
|
<H2>NAME</H2>
|
|
|
|
bridge - show / manipulate bridge addresses and devices
|
|
<A NAME="lbAC"> </A>
|
|
<H2>SYNOPSIS</H2>
|
|
|
|
<P>
|
|
|
|
|
|
<BR>
|
|
|
|
<B>bridge</B>
|
|
|
|
[ <I>OPTIONS</I> ] <I>OBJECT</I> { <I>COMMAND</I> |
|
|
|
|
<B>help</B> }
|
|
|
|
<P>
|
|
<P>
|
|
<BR>
|
|
|
|
<I>OBJECT</I> := {
|
|
|
|
<B>link</B> | <B>fdb</B> | <B>mdb</B> | <B>vlan</B> | <B>monitor</B> }
|
|
|
|
<P>
|
|
<P>
|
|
<BR>
|
|
|
|
<I>OPTIONS</I> := {
|
|
|
|
<B>-V</B>[<I>ersion</I>] |
|
|
<B>-s</B>[<I>tatistics</I>] |
|
|
<B>-n</B>[<I>etns</I>] name |
|
|
<B>-b</B>[<I>atch</I>] filename |
|
|
<B>-c</B>[lor] |
|
|
<B>-p</B>[<I>retty</I>] |
|
|
<B>-j</B>[<I>son</I>] |
|
|
<B>-o</B>[<I>neline</I>] }
|
|
<P>
|
|
<BR>
|
|
|
|
<B>bridge link set</B>
|
|
|
|
<B>dev</B>
|
|
|
|
<I>DEV</I>
|
|
|
|
<I> [ </I>
|
|
|
|
<B>cost</B>
|
|
|
|
<I>COST</I> ] [
|
|
|
|
<B>priority</B>
|
|
|
|
<I>PRIO</I> ] [
|
|
|
|
<B>state</B>
|
|
|
|
<I>STATE</I> ] [
|
|
|
|
<B>guard</B> { <B>on</B> | <B>off</B> } ] [
|
|
|
|
<B>hairpin</B> { <B>on</B> | <B>off</B> } ] [
|
|
|
|
<B>fastleave</B> { <B>on</B> | <B>off</B> } ] [
|
|
|
|
<B>root_block</B> { <B>on</B> | <B>off</B> } ] [
|
|
|
|
<B>learning</B> { <B>on</B> | <B>off</B> } ] [
|
|
|
|
<B>learning_sync</B> { <B>on</B> | <B>off</B> } ] [
|
|
|
|
<B>flood</B> { <B>on</B> | <B>off</B> } ] [
|
|
|
|
<B>hwmode</B> { <B>vepa</B> | <B>veb</B> } ] [
|
|
|
|
<B>mcast_flood</B> { <B>on</B> | <B>off</B> } ] [
|
|
|
|
<B>mcast_to_unicast</B> { <B>on</B> | <B>off</B> } ] [
|
|
|
|
<B>neigh_suppress</B> { <B>on</B> | <B>off</B> } ] [
|
|
|
|
<B>vlan_tunnel</B> { <B>on</B> | <B>off</B> } ] [
|
|
|
|
<B>isolated</B> { <B>on</B> | <B>off</B> } ] [
|
|
|
|
<B>backup_port</B>
|
|
|
|
<I>DEVICE</I> ] [
|
|
|
|
<B>nobackup_port</B> ] [
|
|
|
|
<B>self</B> ] [ <B>master</B> ]
|
|
|
|
<P>
|
|
<BR>
|
|
|
|
<B>bridge link</B> [ <B>show</B> ] [
|
|
|
|
<B>dev</B>
|
|
|
|
<I>DEV</I> ]
|
|
|
|
<P>
|
|
<BR>
|
|
|
|
<B>bridge fdb</B> { <B>add</B> | <B>append</B> | <B>del</B> | <B>replace</B> }
|
|
|
|
<I>LLADDR</I>
|
|
|
|
<B>dev</B>
|
|
|
|
<I>DEV</I> {
|
|
|
|
<B>local</B> | <B>static</B> | <B>dynamic</B> } [
|
|
|
|
<B>self</B> ] [ <B>master</B> ] [ <B>router</B> ] [ <B>use</B> ] [ <B>extern_learn</B> ] [ <B>sticky</B> ] [
|
|
|
|
<B>dst</B>
|
|
|
|
<I>IPADDR</I> ] [
|
|
|
|
<B>src_vni</B>
|
|
|
|
<I>VNI</I> ] [
|
|
|
|
<B>vni</B>
|
|
|
|
<I>VNI</I> ] [
|
|
|
|
<B>port</B>
|
|
|
|
<I>PORT</I> ] [
|
|
|
|
<B>via</B>
|
|
|
|
<I>DEVICE</I> ]
|
|
|
|
<P>
|
|
<BR>
|
|
|
|
<B>bridge fdb</B> [ <B>show</B> ] [
|
|
|
|
<B>dev</B>
|
|
|
|
<I>DEV</I> ] [
|
|
|
|
<B>br</B>
|
|
|
|
<I>BRDEV</I> ] [
|
|
|
|
<B>brport</B>
|
|
|
|
<I>DEV</I> ] [
|
|
|
|
<B>vlan</B>
|
|
|
|
<I>VID</I> ] [
|
|
|
|
<B>state</B>
|
|
|
|
<I>STATE</I> ]
|
|
|
|
<P>
|
|
<BR>
|
|
|
|
<B>bridge fdb get</B>
|
|
|
|
<I>LLADDR [ </I>
|
|
|
|
<B>dev</B>
|
|
|
|
<I>DEV</I> ] [
|
|
|
|
<B>br</B>
|
|
|
|
<I>BRDEV</I> ] [
|
|
|
|
<B>vlan</B>
|
|
|
|
<I>VID</I> ] [
|
|
|
|
<B>self</B> ] [ <B>master</B> ]
|
|
|
|
<P>
|
|
<BR>
|
|
|
|
<B>bridge mdb</B> { <B>add</B> | <B>del</B> }
|
|
|
|
<B>dev</B>
|
|
|
|
<I>DEV</I>
|
|
|
|
<B>port</B>
|
|
|
|
<I>PORT</I>
|
|
|
|
<B>grp</B>
|
|
|
|
<I>GROUP</I> [
|
|
|
|
<B>permanent</B> | <B>temp</B> ] [
|
|
|
|
<B>vid</B>
|
|
|
|
<I>VID</I> ]
|
|
|
|
<P>
|
|
<BR>
|
|
|
|
<B>bridge mdb show </B>[<B></B>
|
|
|
|
<B>dev</B>
|
|
|
|
<I>DEV</I> ]
|
|
|
|
<P>
|
|
<BR>
|
|
|
|
<B>bridge vlan</B> { <B>add</B> | <B>del</B> }
|
|
|
|
<B>dev</B>
|
|
|
|
<I>DEV</I>
|
|
|
|
<B>vid</B>
|
|
|
|
<I>VID</I> [
|
|
|
|
<B>tunnel_info</B>
|
|
|
|
<I>TUNNEL_ID</I> ] [
|
|
|
|
<B>pvid</B> ] [ <B>untagged</B> ] [
|
|
|
|
<B>self</B> ] [ <B>master</B> ]
|
|
|
|
<P>
|
|
<BR>
|
|
|
|
<B>bridge vlan</B> [ <B>show</B> | <B>tunnelshow</B> ] [
|
|
|
|
<B>dev</B>
|
|
|
|
<I>DEV</I> ]
|
|
|
|
<P>
|
|
<BR>
|
|
|
|
<B>bridge monitor</B> [ <B>all</B> | <B>neigh</B> | <B>link</B> | <B>mdb</B> ]
|
|
|
|
<P>
|
|
<A NAME="lbAD"> </A>
|
|
<H2>OPTIONS</H2>
|
|
|
|
<P>
|
|
<DL COMPACT>
|
|
<DT id="1"><B>-V</B>,<B> -Version</B>
|
|
|
|
<DD>
|
|
print the version of the
|
|
<B>bridge</B>
|
|
|
|
utility and exit.
|
|
<P>
|
|
<DT id="2"><B>-s</B>,<B> -stats,</B> -statistics
|
|
|
|
<DD>
|
|
output more information. If this option
|
|
is given multiple times, the amount of information increases.
|
|
As a rule, the information is statistics or some time values.
|
|
<P>
|
|
<DT id="3"><B>-d</B>,<B> -details</B>
|
|
|
|
<DD>
|
|
print detailed information about MDB router ports.
|
|
<P>
|
|
<DT id="4"><B>-n</B>,<B> -net</B>,<B> -netns </B><NETNS>
|
|
|
|
<DD>
|
|
switches
|
|
<B>bridge</B>
|
|
|
|
to the specified network namespace
|
|
<I>NETNS</I>.
|
|
|
|
Actually it just simplifies executing of:
|
|
<P>
|
|
<B>ip netns exec</B>
|
|
|
|
<I>NETNS</I>
|
|
|
|
<B>bridge</B>
|
|
|
|
[ <I>OPTIONS</I> ] <I>OBJECT</I> { <I>COMMAND</I> |
|
|
|
|
<B>help</B> }
|
|
|
|
<P>
|
|
to
|
|
<P>
|
|
<B>bridge</B>
|
|
|
|
-n[etns] <I>NETNS</I> [ <I>OPTIONS</I> ] <I>OBJECT</I> { <I>COMMAND</I> |
|
|
|
|
<B>help</B> }
|
|
|
|
<P>
|
|
<DT id="5"><B>-b,</B> -batch <B><FILENAME></B>
|
|
|
|
<DD>
|
|
Read commands from provided file or standard input and invoke them.
|
|
First failure will cause termination of bridge command.
|
|
<P>
|
|
<DT id="6"><B>-force</B>
|
|
|
|
<DD>
|
|
Don't terminate bridge command on errors in batch mode.
|
|
If there were any errors during execution of the commands, the application
|
|
return code will be non zero.
|
|
<P>
|
|
<DT id="7"><B>-c</B>[<B>color</B>][<B>=</B>{<B>always</B>|<B>auto</B>|<B>never</B>}
|
|
|
|
<DD>
|
|
Configure color output. If parameter is omitted or
|
|
<B>always</B>,
|
|
|
|
color output is enabled regardless of stdout state. If parameter is
|
|
<B>auto</B>,
|
|
|
|
stdout is checked to be a terminal before enabling color output. If parameter is
|
|
<B>never</B>,
|
|
|
|
color output is disabled. If specified multiple times, the last one takes
|
|
precedence. This flag is ignored if
|
|
<B>-json</B>
|
|
|
|
is also given.
|
|
<P>
|
|
<DT id="8"><B>-j,</B> -json
|
|
|
|
<DD>
|
|
Output results in JavaScript Object Notation (JSON).
|
|
<P>
|
|
<DT id="9"><B>-p,</B> -pretty
|
|
|
|
<DD>
|
|
When combined with -j generate a pretty JSON output.
|
|
<P>
|
|
<DT id="10"><B>-o,</B> -oneline
|
|
|
|
<DD>
|
|
output each record on a single line, replacing line feeds
|
|
with the
|
|
<B>'\'</B>
|
|
|
|
character. This is convenient when you want to count records
|
|
with
|
|
<B><A HREF="/cgi-bin/man/man2html?1+wc">wc</A></B>(1)
|
|
|
|
or to
|
|
<B><A HREF="/cgi-bin/man/man2html?1+grep">grep</A></B>(1)
|
|
|
|
the output.
|
|
<P>
|
|
<P>
|
|
</DL>
|
|
<A NAME="lbAE"> </A>
|
|
<H2>BRIDGE - COMMAND SYNTAX</H2>
|
|
|
|
<P>
|
|
<A NAME="lbAF"> </A>
|
|
<H3><I>OBJECT</I>
|
|
|
|
</H3>
|
|
|
|
<P>
|
|
<DL COMPACT>
|
|
<DT id="11"><B>link</B>
|
|
|
|
<DD>
|
|
- Bridge port.
|
|
<P>
|
|
<DT id="12"><B>fdb</B>
|
|
|
|
<DD>
|
|
- Forwarding Database entry.
|
|
<P>
|
|
<DT id="13"><B>mdb</B>
|
|
|
|
<DD>
|
|
- Multicast group database entry.
|
|
<P>
|
|
<DT id="14"><B>vlan</B>
|
|
|
|
<DD>
|
|
- VLAN filter list.
|
|
<P>
|
|
</DL>
|
|
<A NAME="lbAG"> </A>
|
|
<H3><I>COMMAND</I>
|
|
|
|
</H3>
|
|
|
|
<P>
|
|
Specifies the action to perform on the object.
|
|
The set of possible actions depends on the object type.
|
|
As a rule, it is possible to
|
|
<B>add</B>,<B> delete</B>
|
|
|
|
and
|
|
<B>show</B>
|
|
|
|
(or
|
|
<B>list</B>
|
|
|
|
) objects, but some objects do not allow all of these operations
|
|
or have some additional commands. The
|
|
<B>help</B>
|
|
|
|
command is available for all objects. It prints
|
|
out a list of available commands and argument syntax conventions.
|
|
<P>
|
|
If no command is given, some default command is assumed.
|
|
Usually it is
|
|
<B>list</B>
|
|
|
|
or, if the objects of this class cannot be listed,
|
|
<B>help</B>.
|
|
|
|
<P>
|
|
<A NAME="lbAH"> </A>
|
|
<H2>bridge link - bridge port</H2>
|
|
|
|
<P>
|
|
<B>link</B>
|
|
|
|
objects correspond to the port devices of the bridge.
|
|
<P>
|
|
<P>
|
|
|
|
The corresponding commands set and display port status and bridge specific
|
|
attributes.
|
|
<P>
|
|
<A NAME="lbAI"> </A>
|
|
<H3>bridge link set - set bridge specific attributes on a port</H3>
|
|
|
|
<P>
|
|
<DL COMPACT>
|
|
<DT id="15"><B>dev</B><I> NAME </I>
|
|
|
|
<DD>
|
|
interface name of the bridge port
|
|
<P>
|
|
<DT id="16"><B>cost</B><I> COST </I>
|
|
|
|
<DD>
|
|
the STP path cost of the specified port.
|
|
<P>
|
|
<DT id="17"><B>priority</B><I> PRIO </I>
|
|
|
|
<DD>
|
|
the STP port priority. The priority value is an unsigned 8-bit quantity
|
|
(number between 0 and 255). This metric is used in the designated port an
|
|
droot port selectio algorithms.
|
|
<P>
|
|
<DT id="18"><B>state</B><I> STATE </I>
|
|
|
|
<DD>
|
|
the operation state of the port. This is primarily used by user space STP/RSTP
|
|
implementation. One may enter a lowercased port state name, or one of the
|
|
numbers below. Negative inputs are ignored, and unrecognized names return an
|
|
error.
|
|
<P>
|
|
<B>0</B>
|
|
|
|
- port is DISABLED. Make this port completely inactive.
|
|
<P>
|
|
<P>
|
|
<B>1</B>
|
|
|
|
- STP LISTENING state. Only valid if STP is enabled on the bridge. In this
|
|
state the port listens for STP BPDUs and drops all other traffic frames.
|
|
<P>
|
|
<P>
|
|
<B>2</B>
|
|
|
|
- STP LEARNING state. Only valid if STP is enabled on the bridge. In this
|
|
state the port will accept traffic only for the purpose of updating MAC
|
|
address tables.
|
|
<P>
|
|
<P>
|
|
<B>3</B>
|
|
|
|
- STP FORWARDING state. Port is fully active.
|
|
<P>
|
|
<P>
|
|
<B>4</B>
|
|
|
|
- STP BLOCKING state. Only valid if STP is enabled on the bridge. This state
|
|
is used during the STP election process. In this state, port will only process
|
|
STP BPDUs.
|
|
<P>
|
|
<P>
|
|
<DT id="19"><B>guard on </B>or<B> guard off </B>
|
|
|
|
<DD>
|
|
Controls whether STP BPDUs will be processed by the bridge port. By default,
|
|
the flag is turned off allowed BPDU processing. Turning this flag on will
|
|
cause the port to stop processing STP BPDUs.
|
|
<P>
|
|
<DT id="20"><B>hairpin on </B>or<B> hairpin off </B>
|
|
|
|
<DD>
|
|
Controls whether traffic may be send back out of the port on which it was
|
|
received. By default, this flag is turned off and the bridge will not forward
|
|
traffic back out of the receiving port.
|
|
<P>
|
|
<DT id="21"><B>fastleave on </B>or<B> fastleave off </B>
|
|
|
|
<DD>
|
|
This flag allows the bridge to immediately stop multicast traffic on a port
|
|
that receives IGMP Leave message. It is only used with IGMP snooping is
|
|
enabled on the bridge. By default the flag is off.
|
|
<P>
|
|
<DT id="22"><B>root_block on </B>or<B> root_block off </B>
|
|
|
|
<DD>
|
|
Controls whether a given port is allowed to become root port or not. Only used
|
|
when STP is enabled on the bridge. By default the flag is off.
|
|
<P>
|
|
<DT id="23"><B>learning on </B>or<B> learning off </B>
|
|
|
|
<DD>
|
|
Controls whether a given port will learn MAC addresses from received traffic or
|
|
not. If learning if off, the bridge will end up flooding any traffic for which
|
|
it has no FDB entry. By default this flag is on.
|
|
<P>
|
|
<DT id="24"><B>learning_sync on </B>or<B> learning_sync off </B>
|
|
|
|
<DD>
|
|
Controls whether a given port will sync MAC addresses learned on device port to
|
|
bridge FDB.
|
|
<P>
|
|
<DT id="25"><B>flood on </B>or<B> flood off </B>
|
|
|
|
<DD>
|
|
Controls whether a given port will flood unicast traffic for which there is no FDB entry. By default this flag is on.
|
|
<P>
|
|
<DT id="26"><B>hwmode</B>
|
|
|
|
<DD>
|
|
Some network interface cards support HW bridge functionality and they may be
|
|
configured in different modes. Currently support modes are:
|
|
<P>
|
|
<B>vepa</B>
|
|
|
|
- Data sent between HW ports is sent on the wire to the external
|
|
switch.
|
|
<P>
|
|
<B>veb</B>
|
|
|
|
- bridging happens in hardware.
|
|
<P>
|
|
<DT id="27"><B>mcast_flood on </B>or<B> mcast_flood off </B>
|
|
|
|
<DD>
|
|
Controls whether a given port will flood multicast traffic for which
|
|
there is no MDB entry. By default this flag is on.
|
|
<P>
|
|
<DT id="28"><B>mcast_to_unicast on </B>or<B> mcast_to_unicast off </B>
|
|
|
|
<DD>
|
|
Controls whether a given port will replicate packets using unicast
|
|
instead of multicast. By default this flag is off.
|
|
<P>
|
|
<DT id="29"><B>neigh_suppress on </B>or<B> neigh_suppress off </B>
|
|
|
|
<DD>
|
|
Controls whether neigh discovery (arp and nd) proxy and suppression is
|
|
enabled on the port. By default this flag is off.
|
|
<P>
|
|
<DT id="30"><B>vlan_tunnel on </B>or<B> vlan_tunnel off </B>
|
|
|
|
<DD>
|
|
Controls whether vlan to tunnel mapping is enabled on the port. By
|
|
default this flag is off.
|
|
<P>
|
|
<DT id="31"><B>isolated on </B>or<B> isolated off </B>
|
|
|
|
<DD>
|
|
Controls whether a given port will be isolated, which means it will be
|
|
able to communicate with non-isolated ports only. By default this
|
|
flag is off.
|
|
<P>
|
|
<DT id="32"><B>backup_port</B><I> DEVICE</I>
|
|
|
|
<DD>
|
|
If the port loses carrier all traffic will be redirected to the
|
|
configured backup port
|
|
<P>
|
|
<DT id="33"><B>nobackup_port</B>
|
|
|
|
<DD>
|
|
Removes the currently configured backup port
|
|
<P>
|
|
<DT id="34"><B>self</B>
|
|
|
|
<DD>
|
|
link setting is configured on specified physical device
|
|
<P>
|
|
<DT id="35"><B>master</B>
|
|
|
|
<DD>
|
|
link setting is configured on the software bridge (default)
|
|
<P>
|
|
<DT id="36"><B>-t</B>,<B> -timestamp</B>
|
|
|
|
<DD>
|
|
display current time when using monitor option.
|
|
<P>
|
|
</DL>
|
|
<A NAME="lbAJ"> </A>
|
|
<H3>bridge link show - list bridge port configuration.</H3>
|
|
|
|
<P>
|
|
This command displays the current bridge port configuration and flags.
|
|
<P>
|
|
<A NAME="lbAK"> </A>
|
|
<H2>bridge fdb - forwarding database management</H2>
|
|
|
|
<P>
|
|
<B>fdb</B>
|
|
|
|
objects contain known Ethernet addresses on a link.
|
|
<P>
|
|
<P>
|
|
|
|
The corresponding commands display fdb entries, add new entries,
|
|
append entries,
|
|
and delete old ones.
|
|
<P>
|
|
<A NAME="lbAL"> </A>
|
|
<H3>bridge fdb add - add a new fdb entry</H3>
|
|
|
|
<P>
|
|
This command creates a new fdb entry.
|
|
<P>
|
|
<DL COMPACT>
|
|
<DT id="37"><B>LLADDR</B>
|
|
|
|
<DD>
|
|
the Ethernet MAC address.
|
|
<P>
|
|
<DT id="38"><B>dev</B><I> DEV</I>
|
|
|
|
<DD>
|
|
the interface to which this address is associated.
|
|
<P>
|
|
<B>local</B>
|
|
|
|
- is a local permanent fdb entry
|
|
<P>
|
|
<P>
|
|
<B>static</B>
|
|
|
|
- is a static (no arp) fdb entry
|
|
<P>
|
|
<P>
|
|
<B>dynamic</B>
|
|
|
|
- is a dynamic reachable age-able fdb entry
|
|
<P>
|
|
<P>
|
|
<B>self</B>
|
|
|
|
- the address is associated with the port drivers fdb. Usually hardware.
|
|
<P>
|
|
<P>
|
|
<B>master</B>
|
|
|
|
- the address is associated with master devices fdb. Usually software (default).
|
|
<P>
|
|
<P>
|
|
<B>router</B>
|
|
|
|
- the destination address is associated with a router.
|
|
Valid if the referenced device is a VXLAN type device and has
|
|
route shortcircuit enabled.
|
|
<P>
|
|
<P>
|
|
<B>use</B>
|
|
|
|
- the address is in use. User space can use this option to
|
|
indicate to the kernel that the fdb entry is in use.
|
|
<P>
|
|
<P>
|
|
<B>extern_learn</B>
|
|
|
|
- this entry was learned externally. This option can be used to
|
|
indicate to the kernel that an entry was hardware or user-space
|
|
controller learnt dynamic entry. Kernel will not age such an entry.
|
|
<P>
|
|
<P>
|
|
<B>sticky</B>
|
|
|
|
- this entry will not change its port due to learning.
|
|
<P>
|
|
<P>
|
|
|
|
The next command line parameters apply only
|
|
when the specified device
|
|
<I>DEV</I>
|
|
|
|
is of type VXLAN.
|
|
<DT id="39"><B>dst</B><I> IPADDR</I>
|
|
|
|
<DD>
|
|
the IP address of the destination
|
|
VXLAN tunnel endpoint where the Ethernet MAC ADDRESS resides.
|
|
<P>
|
|
<DT id="40"><B>src_vni</B><I> VNI</I>
|
|
|
|
<DD>
|
|
the src VNI Network Identifier (or VXLAN Segment ID)
|
|
this entry belongs to. Used only when the vxlan device is in
|
|
external or collect metadata mode. If omitted the value specified at
|
|
vxlan device creation will be used.
|
|
<P>
|
|
<DT id="41"><B>vni</B><I> VNI</I>
|
|
|
|
<DD>
|
|
the VXLAN VNI Network Identifier (or VXLAN Segment ID)
|
|
to use to connect to the remote VXLAN tunnel endpoint.
|
|
If omitted the value specified at vxlan device creation
|
|
will be used.
|
|
<P>
|
|
<DT id="42"><B>port</B><I> PORT</I>
|
|
|
|
<DD>
|
|
the UDP destination PORT number to use to connect to the
|
|
remote VXLAN tunnel endpoint.
|
|
If omitted the default value is used.
|
|
<P>
|
|
<DT id="43"><B>via</B><I> DEVICE</I>
|
|
|
|
<DD>
|
|
device name of the outgoing interface for the
|
|
VXLAN device driver to reach the
|
|
remote VXLAN tunnel endpoint.
|
|
<P>
|
|
</DL>
|
|
<A NAME="lbAM"> </A>
|
|
<H3>bridge fdb append - append a forwarding database entry</H3>
|
|
|
|
This command adds a new fdb entry with an already known
|
|
<I>LLADDR</I>.
|
|
|
|
Valid only for multicast link layer addresses.
|
|
The command adds support for broadcast and multicast
|
|
Ethernet MAC addresses.
|
|
The Ethernet MAC address is added multiple times into
|
|
the forwarding database and the vxlan device driver
|
|
sends a copy of the data packet to each entry found.
|
|
<P>
|
|
<P>
|
|
|
|
The arguments are the same as with
|
|
<B>bridge fdb add</B>.
|
|
|
|
<P>
|
|
<A NAME="lbAN"> </A>
|
|
<H3>bridge fdb delete - delete a forwarding database entry</H3>
|
|
|
|
This command removes an existing fdb entry.
|
|
<P>
|
|
<P>
|
|
|
|
The arguments are the same as with
|
|
<B>bridge fdb add</B>.
|
|
|
|
<P>
|
|
<A NAME="lbAO"> </A>
|
|
<H3>bridge fdb replace - replace a forwarding database entry</H3>
|
|
|
|
If no matching entry is found, a new one will be created instead.
|
|
<P>
|
|
<P>
|
|
|
|
The arguments are the same as with
|
|
<B>bridge fdb add</B>.
|
|
|
|
<P>
|
|
<A NAME="lbAP"> </A>
|
|
<H3>bridge fdb show - list forwarding entries.</H3>
|
|
|
|
<P>
|
|
This command displays the current forwarding table.
|
|
<P>
|
|
<P>
|
|
|
|
With the
|
|
<B>-statistics</B>
|
|
|
|
option, the command becomes verbose. It prints out the last updated
|
|
and last used time for each entry.
|
|
<P>
|
|
<A NAME="lbAQ"> </A>
|
|
<H3>bridge fdb get - get bridge forwarding entry.</H3>
|
|
|
|
<P>
|
|
lookup a bridge forwarding table entry.
|
|
<P>
|
|
<DL COMPACT>
|
|
<DT id="44"><B>LLADDR</B>
|
|
|
|
<DD>
|
|
the Ethernet MAC address.
|
|
<P>
|
|
<DT id="45"><B>dev</B><I> DEV</I>
|
|
|
|
<DD>
|
|
the interface to which this address is associated.
|
|
<P>
|
|
<DT id="46"><B>brport</B><I> DEV</I>
|
|
|
|
<DD>
|
|
the bridge port to which this address is associated. same as dev above.
|
|
<P>
|
|
<DT id="47"><B>br</B><I> DEV</I>
|
|
|
|
<DD>
|
|
the bridge to which this address is associated.
|
|
<P>
|
|
<DT id="48"><B>self</B>
|
|
|
|
<DD>
|
|
- the address is associated with the port drivers fdb. Usually hardware.
|
|
<P>
|
|
<DT id="49"><B>master</B>
|
|
|
|
<DD>
|
|
- the address is associated with master devices fdb. Usually software (default).
|
|
<P>
|
|
<P>
|
|
</DL>
|
|
<A NAME="lbAR"> </A>
|
|
<H2>bridge mdb - multicast group database management</H2>
|
|
|
|
<P>
|
|
<B>mdb</B>
|
|
|
|
objects contain known IP multicast group addresses on a link.
|
|
<P>
|
|
<P>
|
|
|
|
The corresponding commands display mdb entries, add new entries,
|
|
and delete old ones.
|
|
<P>
|
|
<A NAME="lbAS"> </A>
|
|
<H3>bridge mdb add - add a new multicast group database entry</H3>
|
|
|
|
<P>
|
|
This command creates a new mdb entry.
|
|
<P>
|
|
<DL COMPACT>
|
|
<DT id="50"><B>dev</B><I> DEV</I>
|
|
|
|
<DD>
|
|
the interface where this group address is associated.
|
|
<P>
|
|
<DT id="51"><B>port</B><I> PORT</I>
|
|
|
|
<DD>
|
|
the port whose link is known to have members of this multicast group.
|
|
<P>
|
|
<DT id="52"><B>grp</B><I> GROUP</I>
|
|
|
|
<DD>
|
|
the IP multicast group address whose members reside on the link connected to
|
|
the port.
|
|
<P>
|
|
<B>permanent</B>
|
|
|
|
- the mdb entry is permanent
|
|
<P>
|
|
<P>
|
|
<B>temp</B>
|
|
|
|
- the mdb entry is temporary (default)
|
|
<P>
|
|
<P>
|
|
<DT id="53"><B>vid</B><I> VID</I>
|
|
|
|
<DD>
|
|
the VLAN ID which is known to have members of this multicast group.
|
|
<P>
|
|
|
|
</DL>
|
|
<A NAME="lbAT"> </A>
|
|
<H3>bridge mdb delete - delete a multicast group database entry</H3>
|
|
|
|
This command removes an existing mdb entry.
|
|
<P>
|
|
<P>
|
|
|
|
The arguments are the same as with
|
|
<B>bridge mdb add</B>.
|
|
|
|
<P>
|
|
<A NAME="lbAU"> </A>
|
|
<H3>bridge mdb show - list multicast group database entries</H3>
|
|
|
|
<P>
|
|
This command displays the current multicast group membership table. The table
|
|
is populated by IGMP and MLD snooping in the bridge driver automatically. It
|
|
can be altered by
|
|
<B>bridge mdb add</B>
|
|
|
|
and
|
|
<B>bridge mdb del</B>
|
|
|
|
commands manually too.
|
|
<P>
|
|
<DL COMPACT>
|
|
<DT id="54"><B>dev</B><I> DEV</I>
|
|
|
|
<DD>
|
|
the interface only whose entries should be listed. Default is to list all
|
|
bridge interfaces.
|
|
<P>
|
|
</DL>
|
|
<P>
|
|
|
|
With the
|
|
<B>-details</B>
|
|
|
|
option, the command becomes verbose. It prints out the ports known to have
|
|
a connected router.
|
|
<P>
|
|
<P>
|
|
|
|
With the
|
|
<B>-statistics</B>
|
|
|
|
option, the command displays timer values for mdb and router port entries.
|
|
<P>
|
|
<A NAME="lbAV"> </A>
|
|
<H2>bridge vlan - VLAN filter list</H2>
|
|
|
|
<P>
|
|
<B>vlan</B>
|
|
|
|
objects contain known VLAN IDs for a link.
|
|
<P>
|
|
<P>
|
|
|
|
The corresponding commands display vlan filter entries, add new entries,
|
|
and delete old ones.
|
|
<P>
|
|
<A NAME="lbAW"> </A>
|
|
<H3>bridge vlan add - add a new vlan filter entry</H3>
|
|
|
|
<P>
|
|
This command creates a new vlan filter entry.
|
|
<P>
|
|
<DL COMPACT>
|
|
<DT id="55"><B>dev</B><I> NAME</I>
|
|
|
|
<DD>
|
|
the interface with which this vlan is associated.
|
|
<P>
|
|
<DT id="56"><B>vid</B><I> VID</I>
|
|
|
|
<DD>
|
|
the VLAN ID that identifies the vlan.
|
|
<P>
|
|
<DT id="57"><B>tunnel_info</B><I> TUNNEL_ID</I>
|
|
|
|
<DD>
|
|
the TUNNEL ID that maps to this vlan. The tunnel id is set in
|
|
dst_metadata for every packet that belongs to this vlan (applicable to
|
|
bridge ports with vlan_tunnel flag set).
|
|
<P>
|
|
<DT id="58"><B>pvid</B>
|
|
|
|
<DD>
|
|
the vlan specified is to be considered a PVID at ingress.
|
|
Any untagged frames will be assigned to this VLAN.
|
|
<P>
|
|
<DT id="59"><B>untagged</B>
|
|
|
|
<DD>
|
|
the vlan specified is to be treated as untagged on egress.
|
|
<P>
|
|
<DT id="60"><B>self</B>
|
|
|
|
<DD>
|
|
the vlan is configured on the specified physical device. Required if the
|
|
device is the bridge device.
|
|
<P>
|
|
<DT id="61"><B>master</B>
|
|
|
|
<DD>
|
|
the vlan is configured on the software bridge (default).
|
|
<P>
|
|
</DL>
|
|
<A NAME="lbAX"> </A>
|
|
<H3>bridge vlan delete - delete a vlan filter entry</H3>
|
|
|
|
This command removes an existing vlan filter entry.
|
|
<P>
|
|
<P>
|
|
|
|
The arguments are the same as with
|
|
<B>bridge vlan add.</B>
|
|
|
|
The
|
|
<B>pvid </B>and<B> untagged</B>
|
|
|
|
flags are ignored.
|
|
<P>
|
|
<A NAME="lbAY"> </A>
|
|
<H3>bridge vlan show - list vlan configuration.</H3>
|
|
|
|
<P>
|
|
This command displays the current VLAN filter table.
|
|
<P>
|
|
<P>
|
|
|
|
With the
|
|
<B>-statistics</B>
|
|
|
|
option, the command displays per-vlan traffic statistics.
|
|
<P>
|
|
<A NAME="lbAZ"> </A>
|
|
<H3>bridge vlan tunnelshow - list vlan tunnel mapping.</H3>
|
|
|
|
<P>
|
|
This command displays the current vlan tunnel info mapping.
|
|
<P>
|
|
<A NAME="lbBA"> </A>
|
|
<H2>bridge monitor - state monitoring</H2>
|
|
|
|
<P>
|
|
The
|
|
<B>bridge</B>
|
|
|
|
utility can monitor the state of devices and addresses
|
|
continuously. This option has a slightly different format.
|
|
Namely, the
|
|
<B>monitor</B>
|
|
|
|
command is the first in the command line and then the object list follows:
|
|
<P>
|
|
<B>bridge monitor</B> [ <B>all</B> |
|
|
|
|
<I>OBJECT-LIST</I> ]
|
|
|
|
<P>
|
|
<I>OBJECT-LIST</I>
|
|
|
|
is the list of object types that we want to monitor.
|
|
It may contain
|
|
<B>link</B>, <B>fdb</B>, and <B>mdb</B>.
|
|
|
|
If no
|
|
<B>file</B>
|
|
|
|
argument is given,
|
|
<B>bridge</B>
|
|
|
|
opens RTNETLINK, listens on it and dumps state changes in the format
|
|
described in previous sections.
|
|
<P>
|
|
<P>
|
|
|
|
If a file name is given, it does not listen on RTNETLINK,
|
|
but opens the file containing RTNETLINK messages saved in binary format
|
|
and dumps them.
|
|
<P>
|
|
<A NAME="lbBB"> </A>
|
|
<H2>NOTES</H2>
|
|
|
|
This command uses facilities added in Linux 3.0.
|
|
<P>
|
|
Although the forwarding table is maintained on a per-bridge device basis
|
|
the bridge device is not part of the syntax. This is a limitation of the
|
|
underlying netlink neighbour message protocol. When displaying the
|
|
forwarding table, entries for all bridges are displayed.
|
|
Add/delete/modify commands determine the underlying bridge device
|
|
based on the bridge to which the corresponding ethernet device is attached.
|
|
<P>
|
|
<P>
|
|
<A NAME="lbBC"> </A>
|
|
<H2>SEE ALSO</H2>
|
|
|
|
<B><A HREF="/cgi-bin/man/man2html?8+ip">ip</A></B>(8)
|
|
|
|
<A NAME="lbBD"> </A>
|
|
<H2>BUGS</H2>
|
|
|
|
Please direct bugreports and patches to: <B><<A HREF="mailto:netdev@vger.kernel.org">netdev@vger.kernel.org</A>></B>
|
|
|
|
<P>
|
|
<A NAME="lbBE"> </A>
|
|
<H2>AUTHOR</H2>
|
|
|
|
Original Manpage by Stephen Hemminger
|
|
<P>
|
|
|
|
<HR>
|
|
<A NAME="index"> </A><H2>Index</H2>
|
|
<DL>
|
|
<DT id="62"><A HREF="#lbAB">NAME</A><DD>
|
|
<DT id="63"><A HREF="#lbAC">SYNOPSIS</A><DD>
|
|
<DT id="64"><A HREF="#lbAD">OPTIONS</A><DD>
|
|
<DT id="65"><A HREF="#lbAE">BRIDGE - COMMAND SYNTAX</A><DD>
|
|
<DL>
|
|
<DT id="66"><A HREF="#lbAF"><I>OBJECT</I>
|
|
|
|
</A><DD>
|
|
<DT id="67"><A HREF="#lbAG"><I>COMMAND</I>
|
|
|
|
</A><DD>
|
|
</DL>
|
|
<DT id="68"><A HREF="#lbAH">bridge link - bridge port</A><DD>
|
|
<DL>
|
|
<DT id="69"><A HREF="#lbAI">bridge link set - set bridge specific attributes on a port</A><DD>
|
|
<DT id="70"><A HREF="#lbAJ">bridge link show - list bridge port configuration.</A><DD>
|
|
</DL>
|
|
<DT id="71"><A HREF="#lbAK">bridge fdb - forwarding database management</A><DD>
|
|
<DL>
|
|
<DT id="72"><A HREF="#lbAL">bridge fdb add - add a new fdb entry</A><DD>
|
|
<DT id="73"><A HREF="#lbAM">bridge fdb append - append a forwarding database entry</A><DD>
|
|
<DT id="74"><A HREF="#lbAN">bridge fdb delete - delete a forwarding database entry</A><DD>
|
|
<DT id="75"><A HREF="#lbAO">bridge fdb replace - replace a forwarding database entry</A><DD>
|
|
<DT id="76"><A HREF="#lbAP">bridge fdb show - list forwarding entries.</A><DD>
|
|
<DT id="77"><A HREF="#lbAQ">bridge fdb get - get bridge forwarding entry.</A><DD>
|
|
</DL>
|
|
<DT id="78"><A HREF="#lbAR">bridge mdb - multicast group database management</A><DD>
|
|
<DL>
|
|
<DT id="79"><A HREF="#lbAS">bridge mdb add - add a new multicast group database entry</A><DD>
|
|
<DT id="80"><A HREF="#lbAT">bridge mdb delete - delete a multicast group database entry</A><DD>
|
|
<DT id="81"><A HREF="#lbAU">bridge mdb show - list multicast group database entries</A><DD>
|
|
</DL>
|
|
<DT id="82"><A HREF="#lbAV">bridge vlan - VLAN filter list</A><DD>
|
|
<DL>
|
|
<DT id="83"><A HREF="#lbAW">bridge vlan add - add a new vlan filter entry</A><DD>
|
|
<DT id="84"><A HREF="#lbAX">bridge vlan delete - delete a vlan filter entry</A><DD>
|
|
<DT id="85"><A HREF="#lbAY">bridge vlan show - list vlan configuration.</A><DD>
|
|
<DT id="86"><A HREF="#lbAZ">bridge vlan tunnelshow - list vlan tunnel mapping.</A><DD>
|
|
</DL>
|
|
<DT id="87"><A HREF="#lbBA">bridge monitor - state monitoring</A><DD>
|
|
<DT id="88"><A HREF="#lbBB">NOTES</A><DD>
|
|
<DT id="89"><A HREF="#lbBC">SEE ALSO</A><DD>
|
|
<DT id="90"><A HREF="#lbBD">BUGS</A><DD>
|
|
<DT id="91"><A HREF="#lbBE">AUTHOR</A><DD>
|
|
</DL>
|
|
<HR>
|
|
This document was created by
|
|
<A HREF="/cgi-bin/man/man2html">man2html</A>,
|
|
using the manual pages.<BR>
|
|
Time: 00:06:11 GMT, March 31, 2021
|
|
</BODY>
|
|
</HTML>
|