Page 256 / 944 Scroll up to view Page 251 - 255
Chapter 11 Interfaces
ZyWALL USG 50 User’s Guide
256
11.7
Bridge Interfaces
This section introduces bridges and bridge interfaces and then explains the
screens for bridge interfaces.
Bridge Overview
A bridge creates a connection between two or more network segments at the
layer-2 (MAC address) level. In the following example, bridge X connects four
network segments.
When the bridge receives a packet, the bridge records the source MAC address
and the port on which it was received in a table. It also looks up the destination
MAC address in the table. If the bridge knows on which port the destination MAC
address is located, it sends the packet to that port. If the destination MAC address
is not in the table, the bridge broadcasts the packet on every port (except the one
on which it was received).
In the example above, computer A sends a packet to computer B. Bridge X
records the source address 0A:0A:0A:0A:0A:0A and port 2 in the table. It also
looks up 0B:0B:0B:0B:0B:0B in the table. There is no entry yet, so the bridge
broadcasts the packet on ports 1, 3, and 4.
Table 64
Example: Bridge Table After Computer A Sends a Packet to Computer B
MAC ADDRESS
PORT
0A:0A:0A:0A:0A:0A
2
Page 257 / 944
Chapter 11 Interfaces
ZyWALL USG 50 User’s Guide
257
If computer B responds to computer A, bridge X records the source address
0B:0B:0B:0B:0B:0B and port 4 in the table. It also looks up 0A:0A:0A:0A:0A:0A
in the table and sends the packet to port 2 accordingly.
Bridge Interface Overview
A bridge interface creates a software bridge between the members of the bridge
interface. It also becomes the ZyWALL’s interface for the resulting network.
Unlike the device-wide bridge mode in ZyNOS-based ZyWALLs, this ZyWALL can
bridge traffic between some interfaces while it routes traffic for other interfaces.
The bridge interfaces also support more functions, like interface bandwidth
parameters, DHCP settings, and connectivity check. To use the whole ZyWALL as a
transparent bridge, add all of the ZyWALL’s interfaces to a bridge interface.
A bridge interface may consist of the following members:
Zero or one VLAN interfaces (and any associated virtual VLAN interfaces)
Any number of Ethernet interfaces (and any associated virtual Ethernet
interfaces)
When you create a bridge interface, the ZyWALL removes the members’ entries
from the routing table and adds the bridge interface’s entries to the routing table.
For example, this table shows the routing table before and after you create bridge
interface br0 (250.250.250.0/23) between lan1 and vlan1.
In this example, virtual Ethernet interface lan1:1 is also removed from the routing
table when lan1 is added to br0. Virtual interfaces are automatically added to or
remove from a bridge interface when the underlying interface is added or
removed.
Table 65
Example: Bridge Table After Computer B Responds to Computer A
MAC ADDRESS
PORT
0A:0A:0A:0A:0A:0A
2
0B:0B:0B:0B:0B:0B
4
Table 66
Example: Routing Table Before and After Bridge Interface br0 Is Created
IP ADDRESS(ES)
DESTINATION
IP ADDRESS(ES)
DESTINATION
210.210.210.0/24
lan1
221.221.221.0/24
vlan0
210.211.1.0/24
lan1:1
230.230.230.192/26
wan2
221.221.221.0/24
vlan0
241.241.241.241/32
dmz
222.222.222.0/24
vlan1
242.242.242.242/32
dmz
230.230.230.192/26
wan2
250.250.250.0/23
br0
241.241.241.241/32
dmz
242.242.242.242/32
dmz
Page 258 / 944
Chapter 11 Interfaces
ZyWALL USG 50 User’s Guide
258
11.7.1
Bridge Summary
This screen lists every bridge interface and virtual interface created on top of
bridge interfaces. To access this screen, click
Configuration > Network >
Interface
>
Bridge
.
Figure 164
Configuration > Network > Interface > Bridge
Each field is described in the following table.
Table 67
Configuration > Network > Interface > Bridge
LABEL
DESCRIPTION
Add
Click this to create a new entry.
Edit
Double-click an entry or select it and click
Edit
to open a screen
where you can modify the entry’s settings.
Remove
To remove an entry, select it and click
Remove
. The ZyWALL
confirms you want to remove it before doing so.
Activate
To turn on an entry, select it and click
Activate
.
Inactivate
To turn off an entry, select it and click
Inactivate
.
Create Virtual
Interface
To open the screen where you can create a virtual interface, select an
interface and click
Create Virtual Interface
.
Object References
Select an entry and click
Object Reference
s to open a screen that
shows which settings use the entry. See
Section 11.3.2 on page 230
for an example.
#
This field is a sequential value, and it is not associated with any
interface.
Status
This icon is lit when the entry is active and dimmed when the entry is
inactive.
Name
This field displays the name of the interface.
IP Address
This field displays the current IP address of the interface. If the IP
address is 0.0.0.0, the interface does not have an IP address yet.
This screen also shows whether the IP address is a static IP address
(
STATIC
) or dynamically assigned (
DHCP
). IP addresses are always
static in virtual interfaces.
Member
This field displays the Ethernet interfaces and VLAN interfaces in the
bridge interface. It is blank for virtual interfaces.
Apply
Click
Apply
to save your changes back to the ZyWALL.
Reset
Click
Reset
to return the screen to its last-saved settings.
Page 259 / 944
Chapter 11 Interfaces
ZyWALL USG 50 User’s Guide
259
11.7.2
Bridge Add/Edit
This screen lets you configure IP address assignment, interface bandwidth
parameters, DHCP settings, and connectivity check for each bridge interface. To
access this screen, click the
Add
icon at the top of the
Add
column in the
Bridge
Summary
screen, or click an
Edit
icon in the
Bridge Summary
screen. The
following screen appears.
Page 260 / 944
Chapter 11 Interfaces
ZyWALL USG 50 User’s Guide
260
Figure 165
Configuration > Network > Interface > Bridge > Add

Rate

4.5 / 5 based on 2 votes.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top