bridge

Syntax

bridge {block-non-ip-all;bypass-non-ip-unicast;no-packet-flooding {no-trace-route;}}

Hierarchy Level

[edit security flow]

Release Information

Statement introduced in Release 9.5 of Junos OS.

Description

Changes default Layer 2 forwarding behavior.

Options

block-non-ip-all—Block all Layer 2 non-IP and non-ARP traffic, including multicast and broadcast traffic.

no-packet-flooding—Stop IP flooding and send ARP or ICMP requests to discover the destination MAC address for a unicast packet.

no-trace-route—Do not send ICMP requests to discover the destination MAC address for a unicast packet. Only ARP requests are sent. This option only allows the device to discover the destination MAC address for a unicast packet if the destination IP address is in the same subnetwork as the ingress IP address.

bypass-non-ip-unicast—Allow all Layer 2 non-IP traffic to pass through the device.

Note: The block-non-ip-all and bypass-non-ip-unicast options cannot be configured at the same time.

Usage Guidelines

For configuration instructions and examples, see the Junos OS Routing Protocols and Policies Configuration Guide for Security Devices.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuation.