| Argument | Type | Description |
|---|
| name | string | |
| mtu | num | |
| arp | enum (disabled | enabled | proxy-arp | reply-only | local-proxy-arp) | |
| arp-timeout | alt { enum (auto) { auto:0 }
, time
} | |
| protocol-mode | enum (none | stp | rstp | mstp) | |
| fast-forward | bool | |
| igmp-snooping | bool | |
| multicast-router | enum (disabled | temporary-query | permanent) | |
| multicast-querier | bool { } | |
| startup-query-count | num { } | |
| last-member-query-count | num { } | |
| last-member-interval | time { } | |
| membership-interval | time { } | |
| querier-interval | time { } | |
| query-interval | time { } | |
| query-response-interval | time { } | |
| startup-query-interval | time { } | |
| igmp-version | enum (2 | 3) | |
| mld-version | enum (1 | 2) | |
| auto-mac | bool | |
| admin-mac | macAddr { } | |
| ageing-time | time | |
| priority | num { } | |
| max-message-age | time { } | |
| forward-delay | time { } | |
| transmit-hold-count | num { } | |
| region-name | string { } | |
| region-revision | num { } | |
| max-hops | num { } | |
| vlan-filtering | bool | |
| ether-type | enum (0x8100 | 0x88a8 | 0x9100) | |
| pvid | num { } | |
| frame-types | enum (admit-all | admit-only-vlan-tagged | admit-only-untagged-and-priority-tagged) | |
| ingress-filtering | bool { } | |
| dhcp-snooping | bool | |
| dhcp-agent-circuit-id | string | Specify the relay agent circuit-id suboption value of the option 82 to be added to the DHCP messages passing through the bridge.
The string length is limited to 255 characters with the default value being: $(INTERFACE):$(VID).
The string value can contain variables, whose names must be enclosed in parentheses and prepended by a dollar sign.
Example: 'some_arbitrary_text $(VID) another_piece_of_text $(INTERFACE)'.
The following variables are supported: HOSTNAME, INTERFACE, VID and BRIDGEMAC.
For the compatibility with previous versions, where the remote-id value was fixed, the semicolon appearing in the default value expression is not
included in the remote-id value, in the case when the vlan filtering is not enabled. |
| dhcp-agent-remote-id | string | Specify the relay agent remote-id suboption value of the option 82 to be added to the DHCP messages passing through the bridge.
The string length is limited to 255 characters with the default value being: $(BRIDGEMAC).
The string value can contain variables, whose names must be enclosed in parentheses and prepended by a dollar sign.
Example: 'some_arbitrary_text $(HOSTNAME) another_piece_of_text $(BRIDGEMAC)'.
The following variables are supported: HOSTNAME, INTERFACE, VID and BRIDGEMAC. |
| dhcpv6-snooping | bool | |
| dhcpv6-agent-circuit-id | string | Specify the DHCPv6 option 18 value to be added to the DHCPv6 messages passing through the bridge.
The string length is limited to 255 characters with the default value being: $(INTERFACE):$(VID).
The string value can contain variables, whose names must be enclosed in parentheses and prepended by a dollar sign.
Example: 'some_arbitrary_text $(VID) another_piece_of_text $(INTERFACE)'.
The following variables are supported: HOSTNAME, INTERFACE, VID and BRIDGEMAC. |
| dhcpv6-agent-remote-id | string | Specify the DHCPv6 option 37 value to be added to the DHCPv6 messages passing through the bridge.
The string length is limited to 255 characters with the default value being: $(BRIDGEMAC).
The string value can contain variables, whose names must be enclosed in parentheses and prepended by a dollar sign.
Example: 'some_arbitrary_text $(VID) another_piece_of_text $(INTERFACE)'.
The following variables are supported: HOSTNAME, INTERFACE, VID and BRIDGEMAC. |
| ra-guard | bool | |
| port-cost-mode | bool | |
| mvrp | bool { } | |
| msrp | bool | |
| forward-reserved-addresses | bool { } | |
| max-learned-entries | alt { enum (unlimited | auto) { unlimited:bridge::B_MAX_LEARN_UNLIMITED, auto:bridge::B_MAX_LEARN_AUTO }
, num
} | |
| mlag-peer-port | alt { iface_enum { none:nv::BADID } { none:nv::BADID }
, iface_enum
} | |
| mlag-priority | num | |
| mlag-heartbeat | alt { enum (none) { none:0 }
, time [1s .. 10s]
} | |
| Argument | Type | Description |
|---|
| all | switch | |
| static | switch | |
| dynamic | switch | |
| chain ( mandatory ) | enum (input | forward | output) | |
| action | enum (sniff | sniff-pc) | |
| sniff-target | ipAddr { } | |
| sniff-target-port | num { } | |
| sniff-id | num { } | |
| in-interface | super { !
, iface_enum
} | |
| in-bridge | super { !
, iface_enum
} | |
| out-interface | super { !
, iface_enum
} | |
| out-bridge | super { !
, iface_enum
} | |
| in-interface-list | super { !
, enum
} | |
| out-interface-list | super { !
, enum
} | |
| in-bridge-list | super { !
, enum
} | |
| out-bridge-list | super { !
, enum
} | |
| src-mac-address | super { !
, macAddr
, /macAddr
} | |
| dst-mac-address | super { !
, macAddr
, /macAddr
} | |
| mac-protocol | super { !
, alt { enum (length) { length:1, }
, num [ .. 65535]
} { enum (length) { length:1, }
, num [ .. 65535]
}
} | |
| src-address | super { !
, ipAddr
, /num [ .. 32]
} | |
| dst-address | super { !
, ipAddr
, /num [ .. 32]
} | |
| src-address6 | super { !
, ip6Prefix
} | |
| dst-address6 | super { !
, ip6Prefix
} | |
| src-port | super { !
, num [0 .. 65535]
, -num [0 .. 65535]
} | |
| dst-port | super { !
, num [0 .. 65535]
, -num [0 .. 65535]
} | |
| ip-protocol | super { !
, enum () { }
} | |
| packet-mark | super { !
, enum
} | |
| packet-type | super { !
, enum (host | broadcast | multicast | other-host) { host:0, broadcast:1, multicast:2, other-host:3 }
} | |
| limit | super { num
, [ /time]
, ,num
} | |
| 802.3-sap | super { !
, num [ .. 0xff]
} | |
| 802.3-type | super { !
, num [ .. 0xffff]
} | |
| arp-opcode | super { !
, alt { enum (request | reply | request-reverse | reply-reverse | drarp-request | drarp-reply | drarp-error | inarp-request | inarp-reply | arp-nak) { request:1, reply:2, request-reverse:3, reply-reverse:4, drarp-request:5, drarp-reply:6, drarp-error:7, inarp-request:8, inarp-reply:9, arp-nak:10 }
, num [ .. 65535]
} { enum (request | reply | request-reverse | reply-reverse | drarp-request | drarp-reply | drarp-error | inarp-request | inarp-reply | arp-nak) { request:1, reply:2, request-reverse:3, reply-reverse:4, drarp-request:5, drarp-reply:6, drarp-error:7, inarp-request:8, inarp-reply:9, arp-nak:10 }
, num [ .. 65535]
}
} | |
| arp-hardware-type | super { !
, num [ .. 0xffff]
} | |
| arp-packet-type | super { !
, num [ .. 0xffff]
} | |
| arp-src-address | super { !
, ipAddr
, /num [ .. 32]
} | |
| arp-dst-address | super { !
, ipAddr
, /num [ .. 32]
} | |
| arp-src-mac-address | super { !
, macAddr
, /macAddr
} | |
| arp-dst-mac-address | super { !
, macAddr
, /macAddr
} | |
| arp-gratuitous | super { bool
} | |
| vlan-id | super { !
, num [ .. 4095]
} | |
| vlan-priority | super { !
, num [ .. 7]
} | |
| vlan-encap | super { !
, alt { enum (length) { length:1, }
, num [ .. 65535]
} { enum (length) { length:1, }
, num [ .. 65535]
}
} | |
| stp-type | super { !
, alt { enum (config | tcn) { config:0, tcn:0x80 }
, num [ .. 255]
} { enum (config | tcn) { config:0, tcn:0x80 }
, num [ .. 255]
}
} | |
| stp-flags | super { !
, alt { enum (topology-change | topology-change-ack) { topology-change:1, topology-change-ack:0x80 }
, num [ .. 255]
} { enum (topology-change | topology-change-ack) { topology-change:1, topology-change-ack:0x80 }
, num [ .. 255]
}
} | |
| stp-root-priority | super { !
, num [0 .. 65535]
, -num [0 .. 65535]
} | |
| stp-root-address | super { !
, macAddr
, /macAddr
} | |
| stp-root-cost | super { !
, num [0 .. 65535]
, -num [0 .. 65535]
} | |
| stp-sender-priority | super { !
, num [0 .. 65535]
, -num [0 .. 65535]
} | |
| stp-sender-address | super { !
, macAddr
, /macAddr
} | |
| stp-port | super { !
, num [0 .. 65535]
, -num [0 .. 65535]
} | |
| stp-msg-age | super { !
, num [0 .. 65535]
, -num [0 .. 65535]
} | |
| stp-max-age | super { !
, num [0 .. 65535]
, -num [0 .. 65535]
} | |
| stp-hello-time | super { !
, num [0 .. 65535]
, -num [0 .. 65535]
} | |
| stp-forward-delay | super { !
, num [0 .. 65535]
, -num [0 .. 65535]
} | |
| ingress-priority | super { !
, num [0 .. 63]
} | |
| tls-host | super { !
, string
} | |
| log | bool | |
| log-prefix | string | |
| Argument | Type | Description |
|---|
| all | switch | |
| static | switch | |
| dynamic | switch | |
| chain ( mandatory ) | enum | |
| action | enum (accept | passthrough | drop | jump | return | log | mark-packet | set-priority) | |
| jump-target | enum () | |
| new-packet-mark | enum () | |
| new-priority | num { } | |
| passthrough | bool { } | |
| in-interface | super { !
, iface_enum
} | |
| in-bridge | super { !
, iface_enum
} | |
| out-interface | super { !
, iface_enum
} | |
| out-bridge | super { !
, iface_enum
} | |
| in-interface-list | super { !
, enum
} | |
| out-interface-list | super { !
, enum
} | |
| in-bridge-list | super { !
, enum
} | |
| out-bridge-list | super { !
, enum
} | |
| src-mac-address | super { !
, macAddr
, /macAddr
} | |
| dst-mac-address | super { !
, macAddr
, /macAddr
} | |
| mac-protocol | super { !
, alt { enum (length) { length:1, }
, num [ .. 65535]
} { enum (length) { length:1, }
, num [ .. 65535]
}
} | |
| src-address | super { !
, ipAddr
, /num [ .. 32]
} | |
| dst-address | super { !
, ipAddr
, /num [ .. 32]
} | |
| src-address6 | super { !
, ip6Prefix
} | |
| dst-address6 | super { !
, ip6Prefix
} | |
| src-port | super { !
, num [0 .. 65535]
, -num [0 .. 65535]
} | |
| dst-port | super { !
, num [0 .. 65535]
, -num [0 .. 65535]
} | |
| ip-protocol | super { !
, enum () { }
} | |
| packet-mark | super { !
, enum
} | |
| packet-type | super { !
, enum (host | broadcast | multicast | other-host) { host:0, broadcast:1, multicast:2, other-host:3 }
} | |
| limit | super { num
, [ /time]
, ,num
} | |
| 802.3-sap | super { !
, num [ .. 0xff]
} | |
| 802.3-type | super { !
, num [ .. 0xffff]
} | |
| arp-opcode | super { !
, alt { enum (request | reply | request-reverse | reply-reverse | drarp-request | drarp-reply | drarp-error | inarp-request | inarp-reply | arp-nak) { request:1, reply:2, request-reverse:3, reply-reverse:4, drarp-request:5, drarp-reply:6, drarp-error:7, inarp-request:8, inarp-reply:9, arp-nak:10 }
, num [ .. 65535]
} { enum (request | reply | request-reverse | reply-reverse | drarp-request | drarp-reply | drarp-error | inarp-request | inarp-reply | arp-nak) { request:1, reply:2, request-reverse:3, reply-reverse:4, drarp-request:5, drarp-reply:6, drarp-error:7, inarp-request:8, inarp-reply:9, arp-nak:10 }
, num [ .. 65535]
}
} | |
| arp-hardware-type | super { !
, num [ .. 0xffff]
} | |
| arp-packet-type | super { !
, num [ .. 0xffff]
} | |
| arp-src-address | super { !
, ipAddr
, /num [ .. 32]
} | |
| arp-dst-address | super { !
, ipAddr
, /num [ .. 32]
} | |
| arp-src-mac-address | super { !
, macAddr
, /macAddr
} | |
| arp-dst-mac-address | super { !
, macAddr
, /macAddr
} | |
| arp-gratuitous | super { bool
} | |
| vlan-id | super { !
, num [ .. 4095]
} | |
| vlan-priority | super { !
, num [ .. 7]
} | |
| vlan-encap | super { !
, alt { enum (length) { length:1, }
, num [ .. 65535]
} { enum (length) { length:1, }
, num [ .. 65535]
}
} | |
| stp-type | super { !
, alt { enum (config | tcn) { config:0, tcn:0x80 }
, num [ .. 255]
} { enum (config | tcn) { config:0, tcn:0x80 }
, num [ .. 255]
}
} | |
| stp-flags | super { !
, alt { enum (topology-change | topology-change-ack) { topology-change:1, topology-change-ack:0x80 }
, num [ .. 255]
} { enum (topology-change | topology-change-ack) { topology-change:1, topology-change-ack:0x80 }
, num [ .. 255]
}
} | |
| stp-root-priority | super { !
, num [0 .. 65535]
, -num [0 .. 65535]
} | |
| stp-root-address | super { !
, macAddr
, /macAddr
} | |
| stp-root-cost | super { !
, num [0 .. 65535]
, -num [0 .. 65535]
} | |
| stp-sender-priority | super { !
, num [0 .. 65535]
, -num [0 .. 65535]
} | |
| stp-sender-address | super { !
, macAddr
, /macAddr
} | |
| stp-port | super { !
, num [0 .. 65535]
, -num [0 .. 65535]
} | |
| stp-msg-age | super { !
, num [0 .. 65535]
, -num [0 .. 65535]
} | |
| stp-max-age | super { !
, num [0 .. 65535]
, -num [0 .. 65535]
} | |
| stp-hello-time | super { !
, num [0 .. 65535]
, -num [0 .. 65535]
} | |
| stp-forward-delay | super { !
, num [0 .. 65535]
, -num [0 .. 65535]
} | |
| ingress-priority | super { !
, num [0 .. 63]
} | |
| tls-host | super { !
, string
} | |
| log | bool | |
| log-prefix | string | |
| Argument | Type | Description |
|---|
| all | switch | |
| static | switch | |
| dynamic | switch | |
| chain ( mandatory ) | enum | |
| action | enum (accept | passthrough | drop | jump | return | log | mark-packet | set-priority | src-nat | dst-nat | redirect | arp-reply) | |
| jump-target | enum () | |
| new-packet-mark | enum () | |
| to-src-mac-address | macAddr { } | |
| to-dst-mac-address | macAddr { } | |
| to-arp-reply-mac-address | macAddr { } | |
| new-priority | num { } | |
| passthrough | bool { } | |
| in-interface | super { !
, iface_enum
} | |
| in-bridge | super { !
, iface_enum
} | |
| out-interface | super { !
, iface_enum
} | |
| out-bridge | super { !
, iface_enum
} | |
| in-interface-list | super { !
, enum
} | |
| out-interface-list | super { !
, enum
} | |
| in-bridge-list | super { !
, enum
} | |
| out-bridge-list | super { !
, enum
} | |
| src-mac-address | super { !
, macAddr
, /macAddr
} | |
| dst-mac-address | super { !
, macAddr
, /macAddr
} | |
| mac-protocol | super { !
, alt { enum (length) { length:1, }
, num [ .. 65535]
} { enum (length) { length:1, }
, num [ .. 65535]
}
} | |
| src-address | super { !
, ipAddr
, /num [ .. 32]
} | |
| dst-address | super { !
, ipAddr
, /num [ .. 32]
} | |
| src-address6 | super { !
, ip6Prefix
} | |
| dst-address6 | super { !
, ip6Prefix
} | |
| src-port | super { !
, num [0 .. 65535]
, -num [0 .. 65535]
} | |
| dst-port | super { !
, num [0 .. 65535]
, -num [0 .. 65535]
} | |
| ip-protocol | super { !
, enum () { }
} | |
| packet-mark | super { !
, enum
} | |
| packet-type | super { !
, enum (host | broadcast | multicast | other-host) { host:0, broadcast:1, multicast:2, other-host:3 }
} | |
| limit | super { num
, [ /time]
, ,num
} | |
| 802.3-sap | super { !
, num [ .. 0xff]
} | |
| 802.3-type | super { !
, num [ .. 0xffff]
} | |
| arp-opcode | super { !
, alt { enum (request | reply | request-reverse | reply-reverse | drarp-request | drarp-reply | drarp-error | inarp-request | inarp-reply | arp-nak) { request:1, reply:2, request-reverse:3, reply-reverse:4, drarp-request:5, drarp-reply:6, drarp-error:7, inarp-request:8, inarp-reply:9, arp-nak:10 }
, num [ .. 65535]
} { enum (request | reply | request-reverse | reply-reverse | drarp-request | drarp-reply | drarp-error | inarp-request | inarp-reply | arp-nak) { request:1, reply:2, request-reverse:3, reply-reverse:4, drarp-request:5, drarp-reply:6, drarp-error:7, inarp-request:8, inarp-reply:9, arp-nak:10 }
, num [ .. 65535]
}
} | |
| arp-hardware-type | super { !
, num [ .. 0xffff]
} | |
| arp-packet-type | super { !
, num [ .. 0xffff]
} | |
| arp-src-address | super { !
, ipAddr
, /num [ .. 32]
} | |
| arp-dst-address | super { !
, ipAddr
, /num [ .. 32]
} | |
| arp-src-mac-address | super { !
, macAddr
, /macAddr
} | |
| arp-dst-mac-address | super { !
, macAddr
, /macAddr
} | |
| arp-gratuitous | super { bool
} | |
| vlan-id | super { !
, num [ .. 4095]
} | |
| vlan-priority | super { !
, num [ .. 7]
} | |
| vlan-encap | super { !
, alt { enum (length) { length:1, }
, num [ .. 65535]
} { enum (length) { length:1, }
, num [ .. 65535]
}
} | |
| stp-type | super { !
, alt { enum (config | tcn) { config:0, tcn:0x80 }
, num [ .. 255]
} { enum (config | tcn) { config:0, tcn:0x80 }
, num [ .. 255]
}
} | |
| stp-flags | super { !
, alt { enum (topology-change | topology-change-ack) { topology-change:1, topology-change-ack:0x80 }
, num [ .. 255]
} { enum (topology-change | topology-change-ack) { topology-change:1, topology-change-ack:0x80 }
, num [ .. 255]
}
} | |
| stp-root-priority | super { !
, num [0 .. 65535]
, -num [0 .. 65535]
} | |
| stp-root-address | super { !
, macAddr
, /macAddr
} | |
| stp-root-cost | super { !
, num [0 .. 65535]
, -num [0 .. 65535]
} | |
| stp-sender-priority | super { !
, num [0 .. 65535]
, -num [0 .. 65535]
} | |
| stp-sender-address | super { !
, macAddr
, /macAddr
} | |
| stp-port | super { !
, num [0 .. 65535]
, -num [0 .. 65535]
} | |
| stp-msg-age | super { !
, num [0 .. 65535]
, -num [0 .. 65535]
} | |
| stp-max-age | super { !
, num [0 .. 65535]
, -num [0 .. 65535]
} | |
| stp-hello-time | super { !
, num [0 .. 65535]
, -num [0 .. 65535]
} | |
| stp-forward-delay | super { !
, num [0 .. 65535]
, -num [0 .. 65535]
} | |
| ingress-priority | super { !
, num [0 .. 63]
} | |
| tls-host | super { !
, string
} | |
| log | bool | |
| log-prefix | string | |