Configuring Bridging

The SLB switch can be configured to serve as both an IP router and a MAC-level bridge, bridging any traffic that cannot otherwise be routed.

• In global configuration mode:

  • Select Spanning-Tree Protocol (IEEE preferred).

  • Assign a priority to the bridge (optional).

• In interface configuration mode:

  • Determine which interfaces belong to the same bridge group.

  These interfaces will be part of the same spanning tree. This allows the SLB switch to bridge all nonrouted traffic among the network interfaces comprising the bridge group. Interfaces not participating in a bridge group cannot forward bridged traffic.
  

  If the packet's destination address is known in the bridge table, it is forwarded on a single interface in the bridge group. If the packet's destination is unknown in the bridge table, it is flooded on all forwarding interfaces in the bridge group. The bridge places source addresses in the bridge table as it learns them during the process of bridging.
  

  A separate spanning-tree process runs for each configured bridge group. Each bridge group participates in a separate spanning tree. A bridge group establishes a spanning tree based on the Bridge Protocol Data Units (BPDUs) it receives on only its member interfaces.
  

  • Assign a cost to the outgoing interface (optional).

For additional transparent bridging configuration tasks, such as configuring bridged VLANs, routing between VLANs, and adjusting the Spanning-Tree Protocol, refer to the following Cisco IOS software publications:

Command	Purpose
SLB-Switch# clear bridgebridge-group	Removes any learned entries from the forwarding database and clears the transmit and receive counts for any statically configured forwarding entries.
SLB-Switch# clear vlan statistics	Removes virtual LAN statistics from any static or system configured entries.
SLB-Switch# show bridge [bridge-group]	Displays classes of entries in the bridge forwarding database.
SLB-Switch# show bridge [bridge-group] circuit-group [circuit-group] [src-mac-address] [dest-mac-address]	Displays the interfaces configured in each circuit group and shows whether they are participating in load distribution.
SLB-Switch# show bridge group verbose	Displays extended information about configured bridge groups.
SLB-Switch# show bridge vlan	Displays IEEE 802.10 transparently bridged virtual LAN configuration.
SLB-Switch# show span	Displays the spanning-tree topology known to the SLB switch.
SLB-Switch# show vlans	Displays a summary of virtual LAN subinterfaces.

Because bridging is in the data-link layer (Layer 2) and routing is in the network layer (Layer 3), they have different protocol configuration models. With IP, for example, bridge group interfaces belong to the same network and have a collective IP network address. In contrast, each routed interface represents a distinct network and has its own IP network address. Integrated routing and bridging uses the concept of a Bridge-Group Virtual Interface (BVI) to enable these interfaces to exchange packets for a given protocol.

Layer 3 switching software supports the routing of IP between routed interfaces and bridged interfaces in the same router, in both fast-switching and process-switching paths.

• The default route/bridge behavior in a bridge group (when IRB is enabled) is to bridge all packets. Make sure you explicitly configure routing on the BVI for protocols that you want routed.

• Packets of nonroutable protocols such as local-area transport (LAT) are always bridged. You cannot disable bridging for the nonroutable traffic.

• The protocol attributes should not be configured on the bridged interfaces when using IRB to bridge and route a given protocol. Bridging attributes cannot be configured on the BVI.

• A bridge links several network segments into one large, flat network. To bridge a packet coming from a routed interface among the bridged interfaces, the whole bridge group should be represented by one interface.

• The BVI has default data-link and network-layer encapsulations. These encapsulations are the same as on the Ethernet, except that you can configure the BVI with some encapsulations that are not supported on a normal Ethernet interface.

   a. Enable bridging.

   b. Assign bridge groups to interfaces.

   c. Configure routing for desired protocols.

Step 2   Configure IRB and the BVI.

   a. Enable IRB.

   b. Configure the BVI.

   c. Enable the BVI to accept routed packets.

   d. Enable routing on the BVI for desired protocols.

Step 3   Verify IRB configuration.

When you configure the BVI and enable routing on it, packets that come in on a routed interface destined for a host on a segment that is in a bridge group complete the following process:

• The packet is routed to the BVI

• Then, the BVI forwarded to the bridging engine.

• From the bridging engine, the packet exits through a bridged interface.

Similarly, packets that come in on a bridged interface but are destined for a host on a routed interface complete the following process:

• The packet goes first to the BVI.

• Then, the BVI forwards the packets to the routing engine.

• From the routing engine, the packets exit on the routed interface.

To define a bridge group and configure an interface in the bridge group, use the following steps beginning in global configuration mode:

	Command	Purpose
Step 1	SLB-Switch(config)# bridge bridge-group protocol {ieee | dec}	Defines one or more bridge groups.
Step 2	SLB-Switch(config)# interface fastethernet interface_number or SLB-Switch(config)# interface gigabitethernet interface_number SLB-Switch(config-if)#	Enters Ethernet interface configuration mode to configure the Fast or Gigabit Ethernet interface.
Step 3	SLB-Switch(config-if)# bridge-group bridge-group	Assigns a bridge group number to the designated interface.
Step 4	SLB-Switch(config-if)# exit	Returns to global configuration mode.

To enable and configure IRB and BVI, perform the following steps:

	Command	Purpose
Step 1	SLB-Switch(config)# bridge irb	Enables IRB, allowing routing of traffic from the bridged interfaces.
Step 2	SLB-Switch(config)# interface bvi bridge-group SLB-Switch(config-if)#	Configures the BVI by assigning the corresponding bridge group's number to the BVI. Each bridge group can only have one corresponding BVI.
Step 3	SLB-Switch(config-if)# ip address ip-address subnet-mask	Configures protocol addresses on routed interfaces. This step shows an example for IP. Optionally, you can configure additional routing attributes to the BVI.
Step 4	SLB-Switch(config-if)# exit SLB-Switch(config)#	Exits interface configuration mode.
Step 5	SLB-Switch(config)# bridge bridge-group route protocol	Enables a BVI to accept and route routable packets received from its corresponding bridge group. You must issue this command for each protocol that you want the BVI to route from its corresponding bridge group to other routed interfaces.
Step 6	SLB-Switch(config)# end SLB-Switch#	Exits global configuration mode. Optionally, you can configure additional routing attributes to the BVI at this point.
Step 7	SLB-Switch# copy system:running-config nvram:startup-config	Saves your configuration changes to NVRAM.

Command	Purpose
SLB-Switch# show interfaces bvi interface-name	Displays BVI information, such as the BVI MAC address and processing statistics
SLB-Switch# show interfaces irb	Displays the following BVI information: Protocols that this bridged interface can route to the other routed interface if this packet is routable Protocols that this bridged interface bridges Entries in the software MAC-address filter