6.4. Configure Network Bridging Using a GUI
IPconfiguration such as
IPaddressing is allowed to proceed before any slaves or ports are connected or begin forwarding packets.
6.4.1. Establishing a Bridge Connection with a GUI
Procedure 6.1. Adding a New Bridge Connection Using nm-connection-editor
- Enter nm-connection-editor in a terminal:
- Click the Add button. The Choose a Connection Type window appears. Select Bridge and click Create. The Editing Bridge connection 1 window appears.
Figure 6.5. Editing Bridge Connection 1
- Add slave devices by referring to Procedure 6.3, “Adding a Slave Interface to a Bridge” below.
Procedure 6.2. Editing an Existing Bridge Connection
- Enter nm-connection-editor in a terminal:
- Select the Bridge connection you want to edit.
- Click the Edit button.
Configuring the Connection Name, Auto-Connect Behavior, and Availability Settings
- Connection name — Enter a descriptive name for your network connection. This name will be used to list this connection in the menu of the Network window.
- Automatically connect to this network when it is available — Select this box if you want NetworkManager to auto-connect to this connection when it is available. See Section 2.3.3, “Connecting to a Network Automatically” for more information.
- All users may connect to this network — Select this box to create a connection available to all users on the system. Changing this setting may require root privileges. See Section 2.3.5, “System-wide and Private Connection Profiles” for details.
- Automatically connect to VPN when using this connection — Select this box if you want NetworkManager to auto-connect to a VPN connection when it is available. Select the VPN from the dropdown menu.
- Firewall Zone — Select the Firewall Zone from the dropdown menu. See the Red Hat Enterprise Linux 7 Security Guide for more information on Firewall Zones.
220.127.116.11. Configuring the Bridge Tab
- Interface name
- The name of the interface to the bridge.
- Bridged connections
- One or more slave interfaces.
- Aging time
- The time, in seconds, a MAC address is kept in the MAC address forwarding database.
- Enable IGMP snooping
- If required, select the check box to enable IGMP snooping on the device.
- Enable STP (Spanning Tree Protocol)
- If required, select the check box to enable
- The bridge priority; the bridge with the lowest priority will be elected as the root bridge.
- Forward delay
- The time, in seconds, spent in both the Listening and Learning states before entering the Forwarding state. The default is 15 seconds.
- Hello time
- The time interval, in seconds, between sending configuration information in bridge protocol data units (BPDU).
- Max age
- The maximum time, in seconds, to store the configuration information from BPDUs. This value should be twice the Hello Time plus 1 but less than twice the Forwarding delay minus 1.
- Group forward mask
- This property is a mask of group addresses that allows group addresses to be forwarded. In most cases, group addresses in the range from
01:80:C2:00:00:0Fare not forwarded by the bridge device. This property is a mask of 16 bits, each corresponding to a group address in the above range, that must be forwarded. Note that the
Group forward maskproperty cannot have any of the
2bits set to
1because those addresses are used for Spanning tree protocol (STP), Link Aggregation Control Protocol (LACP) and Ethernet MAC pause frames.
Procedure 6.3. Adding a Slave Interface to a Bridge
- To add a port to a bridge, select the Bridge tab in the Editing Bridge connection 1 window. If necessary, open this window by following the procedure in Procedure 6.2, “Editing an Existing Bridge Connection”.
- Click Choose a Connection Type menu appears.. The
- Select the type of connection to be created from the list. Click Create. A window appropriate to the connection type selected appears.
Figure 6.6. The NetworkManager Graphical User Interface Add a Bridge Connection
- Select the Bridge Port tab. Configure Priority and Path cost as required. Note the STP priority for a bridge port is limited by the Linux kernel. Although the standard allows a range of
255, Linux only allows
63. The default is
32in this case.
Figure 6.7. The NetworkManager Graphical User Interface Bridge Port tab
- If required, select the Hairpin mode check box to enable forwarding of frames for external processing. Also known as virtual Ethernet port aggregator (VEPA) mode.
- An Ethernet slave, click the Ethernet tab and proceed to the section called “Basic Configuration Options ”, or;
- A Bond slave, click the Bond tab and proceed to Section 18.104.22.168, “Configuring the Bond Tab”, or;
- A Team slave, click the Team tab and proceed to Section 22.214.171.124, “Configuring the Team Tab”, or;
- An VLAN slave, click the VLAN tab and proceed to Section 126.96.36.199, “Configuring the VLAN Tab”, or;
Saving Your New (or Modified) Connection and Making Further Configurations
Figure 6.8. The NetworkManager Graphical User Interface with Bridge