16a2e9b73SSam Ravnborg# 26a2e9b73SSam Ravnborg# 802.1d Ethernet Bridging 36a2e9b73SSam Ravnborg# 46a2e9b73SSam Ravnborg 56a2e9b73SSam Ravnborgconfig BRIDGE 66a2e9b73SSam Ravnborg tristate "802.1d Ethernet Bridging" 7cf0f02d0SStephen Hemminger select LLC 87c85fbf0SPatrick McHardy select STP 9dcbcdf22SRandy Dunlap depends on IPV6 || IPV6=n 106a2e9b73SSam Ravnborg ---help--- 116a2e9b73SSam Ravnborg If you say Y here, then your Linux box will be able to act as an 126a2e9b73SSam Ravnborg Ethernet bridge, which means that the different Ethernet segments it 136a2e9b73SSam Ravnborg is connected to will appear as one Ethernet to the participants. 146a2e9b73SSam Ravnborg Several such bridges can work together to create even larger 156a2e9b73SSam Ravnborg networks of Ethernets using the IEEE 802.1 spanning tree algorithm. 166a2e9b73SSam Ravnborg As this is a standard, Linux bridges will cooperate properly with 176a2e9b73SSam Ravnborg other third party bridge products. 186a2e9b73SSam Ravnborg 196a2e9b73SSam Ravnborg In order to use the Ethernet bridge, you'll need the bridge 206a2e9b73SSam Ravnborg configuration tools; see <file:Documentation/networking/bridge.txt> 216a2e9b73SSam Ravnborg for location. Please read the Bridge mini-HOWTO for more 226a2e9b73SSam Ravnborg information. 236a2e9b73SSam Ravnborg 246a2e9b73SSam Ravnborg If you enable iptables support along with the bridge support then you 256a2e9b73SSam Ravnborg turn your bridge into a bridging IP firewall. 266a2e9b73SSam Ravnborg iptables will then see the IP packets being bridged, so you need to 276a2e9b73SSam Ravnborg take this into account when setting up your firewall rules. 286a2e9b73SSam Ravnborg Enabling arptables support when bridging will let arptables see 296a2e9b73SSam Ravnborg bridged ARP traffic in the arptables FORWARD chain. 306a2e9b73SSam Ravnborg 316a2e9b73SSam Ravnborg To compile this code as a module, choose M here: the module 326a2e9b73SSam Ravnborg will be called bridge. 336a2e9b73SSam Ravnborg 346a2e9b73SSam Ravnborg If unsure, say N. 35eb1d1641SHerbert Xu 36eb1d1641SHerbert Xuconfig BRIDGE_IGMP_SNOOPING 3708b202b6SYOSHIFUJI Hideaki bool "IGMP/MLD snooping" 38024c378fSDavid S. Miller depends on BRIDGE 391cd4efddSRandy Dunlap depends on INET 40eb1d1641SHerbert Xu default y 41eb1d1641SHerbert Xu ---help--- 42eb1d1641SHerbert Xu If you say Y here, then the Ethernet bridge will be able selectively 4308b202b6SYOSHIFUJI Hideaki forward multicast traffic based on IGMP/MLD traffic received from 4408b202b6SYOSHIFUJI Hideaki each port. 45eb1d1641SHerbert Xu 46eb1d1641SHerbert Xu Say N to exclude this support and reduce the binary size. 47eb1d1641SHerbert Xu 48eb1d1641SHerbert Xu If unsure, say Y. 49*243a2e63SVlad Yasevich 50*243a2e63SVlad Yasevichconfig BRIDGE_VLAN_FILTERING 51*243a2e63SVlad Yasevich bool "VLAN filtering" 52*243a2e63SVlad Yasevich depends on BRIDGE 53*243a2e63SVlad Yasevich depends on VLAN_8021Q 54*243a2e63SVlad Yasevich default n 55*243a2e63SVlad Yasevich ---help--- 56*243a2e63SVlad Yasevich If you say Y here, then the Ethernet bridge will be able selectively 57*243a2e63SVlad Yasevich receive and forward traffic based on VLAN information in the packet 58*243a2e63SVlad Yasevich any VLAN information configured on the bridge port or bridge device. 59*243a2e63SVlad Yasevich 60*243a2e63SVlad Yasevich Say N to exclude this support and reduce the binary size. 61*243a2e63SVlad Yasevich 62*243a2e63SVlad Yasevich If unsure, say Y. 63