1*ec8f24b7SThomas Gleixner# SPDX-License-Identifier: GPL-2.0-only 26a2e9b73SSam Ravnborg# 36a2e9b73SSam Ravnborg# 802.1d Ethernet Bridging 46a2e9b73SSam Ravnborg# 56a2e9b73SSam Ravnborg 66a2e9b73SSam Ravnborgconfig BRIDGE 76a2e9b73SSam Ravnborg tristate "802.1d Ethernet Bridging" 8cf0f02d0SStephen Hemminger select LLC 97c85fbf0SPatrick McHardy select STP 10dcbcdf22SRandy Dunlap depends on IPV6 || IPV6=n 116a2e9b73SSam Ravnborg ---help--- 126a2e9b73SSam Ravnborg If you say Y here, then your Linux box will be able to act as an 136a2e9b73SSam Ravnborg Ethernet bridge, which means that the different Ethernet segments it 146a2e9b73SSam Ravnborg is connected to will appear as one Ethernet to the participants. 156a2e9b73SSam Ravnborg Several such bridges can work together to create even larger 166a2e9b73SSam Ravnborg networks of Ethernets using the IEEE 802.1 spanning tree algorithm. 176a2e9b73SSam Ravnborg As this is a standard, Linux bridges will cooperate properly with 186a2e9b73SSam Ravnborg other third party bridge products. 196a2e9b73SSam Ravnborg 206a2e9b73SSam Ravnborg In order to use the Ethernet bridge, you'll need the bridge 21c03e2fa7SMauro Carvalho Chehab configuration tools; see <file:Documentation/networking/bridge.rst> 226a2e9b73SSam Ravnborg for location. Please read the Bridge mini-HOWTO for more 236a2e9b73SSam Ravnborg information. 246a2e9b73SSam Ravnborg 256a2e9b73SSam Ravnborg If you enable iptables support along with the bridge support then you 266a2e9b73SSam Ravnborg turn your bridge into a bridging IP firewall. 276a2e9b73SSam Ravnborg iptables will then see the IP packets being bridged, so you need to 286a2e9b73SSam Ravnborg take this into account when setting up your firewall rules. 296a2e9b73SSam Ravnborg Enabling arptables support when bridging will let arptables see 306a2e9b73SSam Ravnborg bridged ARP traffic in the arptables FORWARD chain. 316a2e9b73SSam Ravnborg 326a2e9b73SSam Ravnborg To compile this code as a module, choose M here: the module 336a2e9b73SSam Ravnborg will be called bridge. 346a2e9b73SSam Ravnborg 356a2e9b73SSam Ravnborg If unsure, say N. 36eb1d1641SHerbert Xu 37eb1d1641SHerbert Xuconfig BRIDGE_IGMP_SNOOPING 3808b202b6SYOSHIFUJI Hideaki bool "IGMP/MLD snooping" 39024c378fSDavid S. Miller depends on BRIDGE 401cd4efddSRandy Dunlap depends on INET 41eb1d1641SHerbert Xu default y 42eb1d1641SHerbert Xu ---help--- 43eb1d1641SHerbert Xu If you say Y here, then the Ethernet bridge will be able selectively 4408b202b6SYOSHIFUJI Hideaki forward multicast traffic based on IGMP/MLD traffic received from 4508b202b6SYOSHIFUJI Hideaki each port. 46eb1d1641SHerbert Xu 47eb1d1641SHerbert Xu Say N to exclude this support and reduce the binary size. 48eb1d1641SHerbert Xu 49eb1d1641SHerbert Xu If unsure, say Y. 50243a2e63SVlad Yasevich 51243a2e63SVlad Yasevichconfig BRIDGE_VLAN_FILTERING 52243a2e63SVlad Yasevich bool "VLAN filtering" 53243a2e63SVlad Yasevich depends on BRIDGE 54243a2e63SVlad Yasevich depends on VLAN_8021Q 55243a2e63SVlad Yasevich default n 56243a2e63SVlad Yasevich ---help--- 57243a2e63SVlad Yasevich If you say Y here, then the Ethernet bridge will be able selectively 58243a2e63SVlad Yasevich receive and forward traffic based on VLAN information in the packet 59243a2e63SVlad Yasevich any VLAN information configured on the bridge port or bridge device. 60243a2e63SVlad Yasevich 61243a2e63SVlad Yasevich Say N to exclude this support and reduce the binary size. 62243a2e63SVlad Yasevich 63243a2e63SVlad Yasevich If unsure, say Y. 64