1ec8f24b7SThomas Gleixner# SPDX-License-Identifier: GPL-2.0-only 26a2e9b73SSam Ravnborg# 36a2e9b73SSam Ravnborg# 802.1d Ethernet Bridging 46a2e9b73SSam Ravnborg# 56a2e9b73SSam Ravnborg 66a2e9b73SSam Ravnborgconfig BRIDGE 76a2e9b73SSam Ravnborg tristate "802.1d Ethernet Bridging" 8cf0f02d0SStephen Hemminger select LLC 97c85fbf0SPatrick McHardy select STP 10dcbcdf22SRandy Dunlap depends on IPV6 || IPV6=n 11a7f7f624SMasahiro Yamada help 126a2e9b73SSam Ravnborg If you say Y here, then your Linux box will be able to act as an 136a2e9b73SSam Ravnborg Ethernet bridge, which means that the different Ethernet segments it 146a2e9b73SSam Ravnborg is connected to will appear as one Ethernet to the participants. 156a2e9b73SSam Ravnborg Several such bridges can work together to create even larger 166a2e9b73SSam Ravnborg networks of Ethernets using the IEEE 802.1 spanning tree algorithm. 176a2e9b73SSam Ravnborg As this is a standard, Linux bridges will cooperate properly with 186a2e9b73SSam Ravnborg other third party bridge products. 196a2e9b73SSam Ravnborg 206a2e9b73SSam Ravnborg In order to use the Ethernet bridge, you'll need the bridge 21c03e2fa7SMauro Carvalho Chehab configuration tools; see <file:Documentation/networking/bridge.rst> 226a2e9b73SSam Ravnborg for location. Please read the Bridge mini-HOWTO for more 236a2e9b73SSam Ravnborg information. 246a2e9b73SSam Ravnborg 256a2e9b73SSam Ravnborg If you enable iptables support along with the bridge support then you 266a2e9b73SSam Ravnborg turn your bridge into a bridging IP firewall. 276a2e9b73SSam Ravnborg iptables will then see the IP packets being bridged, so you need to 286a2e9b73SSam Ravnborg take this into account when setting up your firewall rules. 296a2e9b73SSam Ravnborg Enabling arptables support when bridging will let arptables see 306a2e9b73SSam Ravnborg bridged ARP traffic in the arptables FORWARD chain. 316a2e9b73SSam Ravnborg 326a2e9b73SSam Ravnborg To compile this code as a module, choose M here: the module 336a2e9b73SSam Ravnborg will be called bridge. 346a2e9b73SSam Ravnborg 356a2e9b73SSam Ravnborg If unsure, say N. 36eb1d1641SHerbert Xu 37eb1d1641SHerbert Xuconfig BRIDGE_IGMP_SNOOPING 3808b202b6SYOSHIFUJI Hideaki bool "IGMP/MLD snooping" 39024c378fSDavid S. Miller depends on BRIDGE 401cd4efddSRandy Dunlap depends on INET 41eb1d1641SHerbert Xu default y 42a7f7f624SMasahiro Yamada help 43eb1d1641SHerbert Xu If you say Y here, then the Ethernet bridge will be able selectively 4408b202b6SYOSHIFUJI Hideaki forward multicast traffic based on IGMP/MLD traffic received from 4508b202b6SYOSHIFUJI Hideaki each port. 46eb1d1641SHerbert Xu 47eb1d1641SHerbert Xu Say N to exclude this support and reduce the binary size. 48eb1d1641SHerbert Xu 49eb1d1641SHerbert Xu If unsure, say Y. 50243a2e63SVlad Yasevich 51243a2e63SVlad Yasevichconfig BRIDGE_VLAN_FILTERING 52243a2e63SVlad Yasevich bool "VLAN filtering" 53243a2e63SVlad Yasevich depends on BRIDGE 54243a2e63SVlad Yasevich depends on VLAN_8021Q 55243a2e63SVlad Yasevich default n 56a7f7f624SMasahiro Yamada help 57243a2e63SVlad Yasevich If you say Y here, then the Ethernet bridge will be able selectively 58243a2e63SVlad Yasevich receive and forward traffic based on VLAN information in the packet 59243a2e63SVlad Yasevich any VLAN information configured on the bridge port or bridge device. 60243a2e63SVlad Yasevich 61243a2e63SVlad Yasevich Say N to exclude this support and reduce the binary size. 62243a2e63SVlad Yasevich 63243a2e63SVlad Yasevich If unsure, say Y. 642cc974f8SHoratiu Vultur 652cc974f8SHoratiu Vulturconfig BRIDGE_MRP 662cc974f8SHoratiu Vultur bool "MRP protocol" 672cc974f8SHoratiu Vultur depends on BRIDGE 682cc974f8SHoratiu Vultur default n 692cc974f8SHoratiu Vultur help 702cc974f8SHoratiu Vultur If you say Y here, then the Ethernet bridge will be able to run MRP 712cc974f8SHoratiu Vultur protocol to detect loops 722cc974f8SHoratiu Vultur 732cc974f8SHoratiu Vultur Say N to exclude this support and reduce the binary size. 742cc974f8SHoratiu Vultur 752cc974f8SHoratiu Vultur If unsure, say N. 76*f323aa54SHenrik Bjoernlund 77*f323aa54SHenrik Bjoernlundconfig BRIDGE_CFM 78*f323aa54SHenrik Bjoernlund bool "CFM protocol" 79*f323aa54SHenrik Bjoernlund depends on BRIDGE 80*f323aa54SHenrik Bjoernlund help 81*f323aa54SHenrik Bjoernlund If you say Y here, then the Ethernet bridge will be able to run CFM 82*f323aa54SHenrik Bjoernlund protocol according to 802.1Q section 12.14 83*f323aa54SHenrik Bjoernlund 84*f323aa54SHenrik Bjoernlund Say N to exclude this support and reduce the binary size. 85*f323aa54SHenrik Bjoernlund 86*f323aa54SHenrik Bjoernlund If unsure, say N. 87