1ec8f24b7SThomas Gleixner# SPDX-License-Identifier: GPL-2.0-only 26a2e9b73SSam Ravnborg# 36a2e9b73SSam Ravnborg# 802.1d Ethernet Bridging 46a2e9b73SSam Ravnborg# 56a2e9b73SSam Ravnborg 66a2e9b73SSam Ravnborgconfig BRIDGE 76a2e9b73SSam Ravnborg tristate "802.1d Ethernet Bridging" 8cf0f02d0SStephen Hemminger select LLC 97c85fbf0SPatrick McHardy select STP 10a7f7f624SMasahiro Yamada help 116a2e9b73SSam Ravnborg If you say Y here, then your Linux box will be able to act as an 126a2e9b73SSam Ravnborg Ethernet bridge, which means that the different Ethernet segments it 136a2e9b73SSam Ravnborg is connected to will appear as one Ethernet to the participants. 146a2e9b73SSam Ravnborg Several such bridges can work together to create even larger 156a2e9b73SSam Ravnborg networks of Ethernets using the IEEE 802.1 spanning tree algorithm. 166a2e9b73SSam Ravnborg As this is a standard, Linux bridges will cooperate properly with 176a2e9b73SSam Ravnborg other third party bridge products. 186a2e9b73SSam Ravnborg 196a2e9b73SSam Ravnborg In order to use the Ethernet bridge, you'll need the bridge 20c03e2fa7SMauro Carvalho Chehab configuration tools; see <file:Documentation/networking/bridge.rst> 216a2e9b73SSam Ravnborg for location. Please read the Bridge mini-HOWTO for more 226a2e9b73SSam Ravnborg information. 236a2e9b73SSam Ravnborg 246a2e9b73SSam Ravnborg If you enable iptables support along with the bridge support then you 256a2e9b73SSam Ravnborg turn your bridge into a bridging IP firewall. 266a2e9b73SSam Ravnborg iptables will then see the IP packets being bridged, so you need to 276a2e9b73SSam Ravnborg take this into account when setting up your firewall rules. 286a2e9b73SSam Ravnborg Enabling arptables support when bridging will let arptables see 296a2e9b73SSam Ravnborg bridged ARP traffic in the arptables FORWARD chain. 306a2e9b73SSam Ravnborg 316a2e9b73SSam Ravnborg To compile this code as a module, choose M here: the module 326a2e9b73SSam Ravnborg will be called bridge. 336a2e9b73SSam Ravnborg 346a2e9b73SSam Ravnborg If unsure, say N. 35eb1d1641SHerbert Xu 36eb1d1641SHerbert Xuconfig BRIDGE_IGMP_SNOOPING 3708b202b6SYOSHIFUJI Hideaki bool "IGMP/MLD snooping" 38024c378fSDavid S. Miller depends on BRIDGE 391cd4efddSRandy Dunlap depends on INET 40eb1d1641SHerbert Xu default y 41a7f7f624SMasahiro Yamada help 42eb1d1641SHerbert Xu If you say Y here, then the Ethernet bridge will be able selectively 4308b202b6SYOSHIFUJI Hideaki forward multicast traffic based on IGMP/MLD traffic received from 4408b202b6SYOSHIFUJI Hideaki each port. 45eb1d1641SHerbert Xu 46eb1d1641SHerbert Xu Say N to exclude this support and reduce the binary size. 47eb1d1641SHerbert Xu 48eb1d1641SHerbert Xu If unsure, say Y. 49243a2e63SVlad Yasevich 50243a2e63SVlad Yasevichconfig BRIDGE_VLAN_FILTERING 51243a2e63SVlad Yasevich bool "VLAN filtering" 52243a2e63SVlad Yasevich depends on BRIDGE 53243a2e63SVlad Yasevich depends on VLAN_8021Q 54243a2e63SVlad Yasevich default n 55a7f7f624SMasahiro Yamada help 56243a2e63SVlad Yasevich If you say Y here, then the Ethernet bridge will be able selectively 57243a2e63SVlad Yasevich receive and forward traffic based on VLAN information in the packet 58243a2e63SVlad Yasevich any VLAN information configured on the bridge port or bridge device. 59243a2e63SVlad Yasevich 60243a2e63SVlad Yasevich Say N to exclude this support and reduce the binary size. 61243a2e63SVlad Yasevich 62243a2e63SVlad Yasevich If unsure, say Y. 632cc974f8SHoratiu Vultur 642cc974f8SHoratiu Vulturconfig BRIDGE_MRP 652cc974f8SHoratiu Vultur bool "MRP protocol" 662cc974f8SHoratiu Vultur depends on BRIDGE 672cc974f8SHoratiu Vultur default n 682cc974f8SHoratiu Vultur help 692cc974f8SHoratiu Vultur If you say Y here, then the Ethernet bridge will be able to run MRP 702cc974f8SHoratiu Vultur protocol to detect loops 712cc974f8SHoratiu Vultur 722cc974f8SHoratiu Vultur Say N to exclude this support and reduce the binary size. 732cc974f8SHoratiu Vultur 742cc974f8SHoratiu Vultur If unsure, say N. 75*f323aa54SHenrik Bjoernlund 76*f323aa54SHenrik Bjoernlundconfig BRIDGE_CFM 77*f323aa54SHenrik Bjoernlund bool "CFM protocol" 78*f323aa54SHenrik Bjoernlund depends on BRIDGE 79*f323aa54SHenrik Bjoernlund help 80*f323aa54SHenrik Bjoernlund If you say Y here, then the Ethernet bridge will be able to run CFM 81*f323aa54SHenrik Bjoernlund protocol according to 802.1Q section 12.14 82*f323aa54SHenrik Bjoernlund 83*f323aa54SHenrik Bjoernlund Say N to exclude this support and reduce the binary size. 84*f323aa54SHenrik Bjoernlund 85*f323aa54SHenrik Bjoernlund If unsure, say N. 86