Commit Graph

30 Commits

Author SHA1 Message Date
thompsa
08275780b5 Bump the document date.
Forgotten by:	thompsa
Approved by:	re (bmah)
2007-09-16 21:14:47 +00:00
thompsa
1498d5a44d Allow additional packet filtering on the physical interface for locally
destined packets, disabled by default.

PR:		kern/116051
Submitted by:	Eygene Ryabinkin
Approved by:	re (bmah)
MFC after:	2 weeks
2007-09-16 21:09:15 +00:00
rik
e743c75b95 s/if_vlan/vlan/
Noted by: brueffer
2007-04-03 14:36:18 +00:00
rik
006f27015b Add description how the filter works in case of multiple interfaces
with the same MAC.

PR:     kern/109815
MFC after:	7 days
Submitted by:	Eygene Ryabinkin
Glanced by:	rik (all pointy hats are mine)
Discussed with:	julian@, rik@
2007-04-02 22:04:21 +00:00
thompsa
8ea92215ce Add a section about RSTP support. 2007-01-20 02:39:34 +00:00
thompsa
8951c4c5ee Document net.link.bridge.ipfw_arp for filtering ARP packets with ipfw.
MFC after:	3 days
2006-10-24 08:47:39 +00:00
ru
7b9340e614 Spelling. 2006-10-21 18:04:20 +00:00
thompsa
890e95cf7b Fix a few nits with the last revision
- bump document date
 - fix punctuation and whitespace

Pointed out by:		bmah
2006-10-11 18:26:04 +00:00
thompsa
6ef560faa0 - Note that the bridge uses a random MAC and can be overridden.
- Provide an example of assigning an IP to the bridge.

PR:		kern/102607
Submitted by:	Stefan Bethke <stb@lassitu.de>
MFC after:	3 days
2006-10-08 19:41:05 +00:00
ru
5b7cf06c1d Markup fixes. 2006-09-18 15:24:20 +00:00
brueffer
bf1530d9f7 Convert to the standard section 4 SYNOPSIS layout.
MFC after:	3 days
2006-08-13 18:44:18 +00:00
thompsa
f2d57e8e81 Document the log_stp variable. 2006-08-02 04:11:25 +00:00
thompsa
a0100cc14d Document that we can only bridge wireless interfaces in hostap mode, this is
becoming a faq.

MFC after:	1 week
2006-06-16 23:03:22 +00:00
brueffer
eb6278122a Fix a formatting issue. 2006-05-20 10:19:53 +00:00
thompsa
a3815ff8a1 Correct sentence, forwarding non IP packets is now an option. 2006-04-29 01:19:08 +00:00
keramida
5c892289cb Minor improvements after last revision.
Reviewed by:	thompsa
2006-04-28 22:37:16 +00:00
thompsa
ec08531153 - use ath(4) in the wireless examples rather than the aging wi(4)
- make the packet filtering its own section and clarify a few points
 - note that the interfaces need to be upped [1]

PR:	docs/94545 [1]
2006-04-28 11:48:53 +00:00
thompsa
9665ebce69 Document the monitor mode and explain how it can be used. 2006-03-03 09:32:25 +00:00
thompsa
dcd7416f76 Document which version of 802.1D STP we implement. 2006-03-02 20:50:33 +00:00
thompsa
dfb4dff72d Add code that clears certain capabilities from the member interface, these are
restored when its removed from the bridge.

At the moment we only clear IFCAP_TXCSUM. Since a locally generated packet on
the bridge may be sent out any one or more interfaces it cant be assumed that
every card does hardware csums. Most bridges don't generate a lot of traffic
themselves so turning off offloading won't hurt, bridged packets are
unaffected.

Tested by:	Bruce Walker (bmw borderware.com)
MFC after:	5 days
2006-01-14 03:51:31 +00:00
thompsa
09f2498e57 When pfil(9) is enabled the bridge only considers ETHERTYPE_ARP, ETHERTYPE_IP and
ETHERTYPE_IPV6 frames. Change this to be a sysctl knob so that is able to still
bridge non-IP packets if desired.

Also return early if all pfil_* sysctls are turned off, the user obviously does
not want to filter on the bridge.
2005-12-29 09:39:15 +00:00
thompsa
42c9ecf9f5 Add RFC 3378 EtherIP support. This change makes it possible to add gif
interfaces to bridges, which will then send and receive IP protocol 97 packets.
Packets are Ethernet frames with an EtherIP header prepended.

Obtained from:	NetBSD
MFC after:	2 weeks
2005-12-21 21:29:45 +00:00
ru
8a2652d669 -mdoc sweep. 2005-11-18 10:56:28 +00:00
thompsa
f1c36db980 Clarify that any firewall that has pfil(9) hooks can be used.
Suggested by:	sam
Approved by:	mlaier (mentor)
MFC after:	3 days
2005-09-06 22:38:40 +00:00
thompsa
a3d1367c6d Previously the bridge MTU was set to ETHERMTU and could not be changed. Since
we can only bridge interfaces with the same value it meant that all members had
to be set at ETHERMTU as well.

Allow the first member to be added to define the MTU for the bridge, the check
still applies to all additional members.

Print an informative message if the MTU is incorrect [1]

Requested by:	Niki Denev [1]
Approved by:	mlaier (mentor)
MFC after:	3 days
2005-07-13 20:40:19 +00:00
thompsa
8925fd7b56 Fix a type-o in a bridging example.
Submitted by:	Niki Denev
Approved by:	mlaier (mentor)
Approved by:	re (blanket)
2005-06-27 10:58:22 +00:00
ru
1c089d8fdd (Mostly) markup fixes.
Approved by:	re (blanket)
2005-06-16 18:46:17 +00:00
thompsa
aa4ecbabe5 Add dummynet(4) support to if_bridge, this code is largely based on bridge.c.
This is the final piece to match bridge.c in functionality, we can now be a
drop-in replacement.

Approved by:	mlaier (mentor)
2005-06-10 01:25:22 +00:00
thompsa
cabd7db5b3 Bring in IPFW layer2 filtering from bridge.c, this allows Ethernet filtering
using the layer2, mac and mac-type keywords.

This is one of the last features that bridge.c has over if_bridge and gets us
very close to a full functional replacement.

Approved by:	mlaier (mentor)
2005-06-07 21:20:18 +00:00
thompsa
dc83783f40 Add if_bridge, which provides more advanced Ethernet bridging and 802.1d
spanning tree support.

Based on Jason Wright's bridge driver from OpenBSD, and modified by Jason R.
Thorpe in NetBSD.

Reviewed by:	mlaier, bms, green
Silence from:	-net
Approved by:	mlaier (mentor)
Obtained from:	NetBSD
2005-06-05 02:59:26 +00:00