История страницы

1

Add a network bridge to the system and switch to its configuration mode.

esr(config)# bridge <BRIDGE-ID>

<BRIDGE-ID> – bridge identification number, takes values in the range of:

• for ESR-10/12V(F)/14VF/15 and WLC-15 – [1..50];
• for ESR-20/21/30/100/200 – and WLC-30– [1..250];
• for ESR-1000/1200/1500/1511/1700/3100/3200 and WLC-3200 – [1..500].

2

Enable network bridge.

esr(config-bridge)# enable

3

Specify VRF instance, in which the given modem will operate (optional).

esr(config-bridge)# ip vrf forwarding <VRF>

<VRF> – VRF name, set by the string of up to 31 characters.

4

Specify the configured network bridge description (optional).

esr(config-bridge)# description <DESCRIPTION>

<DESCRIPTION> – network bridge description, set by the string of up to 255 characters.

5

Connect sub interface, qinq interface, L2GRE tunnel or L2TPv3 tunnel with the network bridge. Connected interfaces/tunnels and network bridges automatically become participants of the shared L2 domain (optional).

esr(config-if-gi)# bridge-group <BRIDGE-ID>

esr(config-if-l2tpv3)# bridge-group <BRIDGE-ID>

<BRIDGE-ID> – bridge identification number, takes values in the range of:

• for ESR-10/12V(F)/14VF/15 and WLC-15 – [1..50];
• for ESR-20/21/30/100/200 and WLC-30 – [1..250];
• for ESR-1000/1200/1500/1511/1700/3100/3200 and WLC-3200 – [1..500].

6

Connect the current network bridge with VLAN. All interfaces and L2 tunnels that are members of the assigned VLAN are automatically included in the network bridge and become members of the shared L2 domain (optional)

esr(config-bridge)# vlan <VID>

<VID> – VLAN identifier, set in the range of [1..4094].

7

Specify the size of MTU packets that can be passed by the bridge (optional; possible if only VLAN is included in the bridge).
MTU above 1500 will be active only when using the 'system jumbo-frames' command.

esr(config-bridge)# mtu <MTU>

<MTU> – MTU value, takes values in the range of:

• for ESR-10/12V(F)/14VF and WLC-15 – [552..9600];
• for ESR-20/21 and WLC-30 – [552..9500];
• for ESR-100/200/1000/1200/1500/1511/1700 – [552..10000]
• for ESR-1500/1511/1700/3100 – [552..9190].

Default value: 1500

8

Specify the IPv4/IPv6 address and subnet mask for the interface to be configured or enable IP address obtain dynamically.

esr(config-bridge)# ip address <ADDR/LEN>

<ADDR/LEN> – IP address and subnet mask length, defined as AAA.BBB.CCC.DDD/EE where each part AAA-DDD takes values of [0..255] and EE takes values of [1..32].

For advanced IPv4 addressing features see section IP addressing configuration.

esr(config-bridge)# ipv6 address <IPV6-ADDR/LEN>

<IPV6-ADDR/LEN> – IP address and prefix of a subnet, defined as X:X:X:X::X/EE where each X part takes values in hexadecimal format [0..FFFF] and EE takes values of [1..128].

For advanced IPv6 addressing features see section IPv6 addressing configuration.

Several IPv4/IPv6 addresses can be specified separated by commas. Up to 8 IPv4/IPv6 addresses can be assigned to the interface.

esr(config-bridge)# ip address dhcp

For advanced DHCP client operation features, see section DHCP Client management.

9

Disable the Firewall features on the interface or enable the interface in the security zone (see Firewall configuration).

esr(config-bridge)# ip firewall disable

esr(config-bridge)# security-zone <NAME>

<NAME> – security zone name, set by the string of up to 31 characters.

10

Enable recording of the current interface usage statistics (optional).

esr(config-bridge)# history statistics

11

Specify the time interval during which the statistics on the bridge load is averaged (optional).

esr(config-bridge)# load-average <TIME>

<TIME> – interval in seconds, takes values of [5..150].

Default value: 5

12

Specify the network bridge MAC address different from a system one (optional).

esr(config-bridge)# mac-address <ADDR>

<ADDR> – network bridge MAC address, defined as XX:XX:XX:XX:XX:XX where each part takes the values of [00..FF].

13

Enable interface isolation mode on the bridge.
In this mode, the traffic exchange between members of the network bridge is prohibited.

(Optional; relevant only for ESR-1000/1200/1500/1511/1700/3100)

esr(config-bridge)# protected-ports [ exclude vlan ]

exclude vlan – when specifying the given key, VLAN (connected with bridge) is excluded from the isolated interfaces list.

14

Prohibit unknown-unicast traffic switching (when a destination MAC address is not included in the switching table) in the given bridge.

(Optional; relevant only for ESR-1000/1200/1500/1511/1700/3100)

esr(config-bridge)# unknown-unicast-forwarding disable

15

Set the lifetime of IPv4/IPv6 entries in the ARP table studied on the given bridge (optional).

esr(config-bridge)# ip arp reachable-time <TIME>

or

esr(config-bridge)# ipv6 nd reachable-time <TIME>

<TIME> – lifetime of dynamic MAC addresses, in milliseconds. Allowed values are from 5000 to 100000000 milliseconds. Real time of the entry update varies from [0,5;1,5]*<TIME>.

It is also possible to configure for the bridge interface:

• QoS in basic or advanced mode (see section QoS management);
• proxy (see section HTTP/HTTPS traffic proxying);
• traffic monitoring (see sections Netflow configuration and sFlow configuration);
• routing protocols functionality (see section Routing management);
• VRRF protocol (see section Redundancy management);
• BRAS functionality (see section BRAS (Broadband Remote Access Server) management);
• IDS/IPS functionality (see section IPS/IDS configuration).