Operation: Add Bridge-Pair / Edit Bridge-Pair
Description: To Add/Update Bridge Pair configuration. 

Sample Configuration
<BridgePair> <Name>bridgepairname</Name> <Hardware>Hardwarename</Hardware> <Description>Text</Description> <RoutingOnBridgePair>Enable/Disable</RoutingOnBridgePair> <BridgeMembers> <Member> <Interface>interfacename</Interface> <Zone>zonename</Zone> </Member> <Member> <Interface>interfacename</Interface> <Zone>zonename</Zone> </Member> : </BridgeMembers> <VLANFilteringOnBridge>Enable/Disable</VLANFilteringOnBridge> <PermittedVlansList> <PermittedVLAN>permittedvlans</PermittedVLAN> : </PermittedVlansList> <!-- IPv4 configuration --> <IPv4Configuration>Enable/Disable</IPv4Configuration> <IPv4Assignment>Static/DHCP</IPv4Assignment> <IPAddress>ip address</IPAddress> <Netmask>netmask</Netmask> <Gateway> <GatewayName>Text</GatewayName> <GatewayIPAddress>ip address</GatewayIPAddress> </Gateway> <!-- IPv6 configuration --> <IPv6Configuration>Enable/Disable</IPv6Configuration> <IPv6Assignment>Static/DHCP</IPv6Assignment> <!-- dhcp configuration --> <Mode>Auto/Manual</Mode> <DhcpOnly>Enable/Disable</DhcpOnly> <AcceptOtherConfigfromDHCP>Enable/Disable</AcceptOtherConfigfromDHCP> <DHCPRapidCommit>Enable/Disable</DHCPRapidCommit> <IPv6Address>ipv6 address</IPv6Address> <Prefix>Number</Prefix> <IPv6Gateway> <IPv6GatewayName>Text</IPv6GatewayName> <IPv6GatewayIPAddress>ipv6 address</IPv6GatewayIPAddress> </IPv6Gateway> <ARPBroadcast>Enable/Disable</ARPBroadcast> <MTU>Number</MTU> <MSS> <Override>Enable/Disable</Override> <MSSValue>Number</MSSValue> </MSS> <STP>Enable/Disable</STP> <MAXAge>{Number}</MAXAge> <MACAging>{Number}</MACAging> <FilterEthernetFrames>Enable/Disable</FilterEthernetFrames> <EtherTypeList> <EtherType>EtherType</EtherType> <EtherType>EtherType</EtherType> : </EtherTypeList> <!-- RA Configuration for dhcp --> <DADAttempts>1</DADAttempts> <AllowedRAServers /> </BridgePair>



Parameter Mandatory Default Description
HardwareYes  
Specify a name for the bridge pair.
Hardware confines to:
  • Type is 'SCALAR'.
  • Datatype is 'STRING'.
  • Allowed first characters: (A-Za-z). For other characters: (A-Za-z0-9_)
  • Maximum characters allowed are 10.
DescriptionNo  
Specify description for the bridge-pair.
Description confines to:
  • Type is 'SCALAR'.
  • Datatype is 'STRING'.
  • Maximum characters allowed are 100.
RoutingOnBridgePairNo  
Used to enable routing on bridge-pair.
RoutingOnBridgePair confines to:
  • Type is 'SCALAR'.
  • Datatype is 'STRING'.
IPAssignTypeNo  
Select the type of IPv4 assignment: Static or DHCP
IPAssignType confines to:
  • Type is 'SCALAR'.
  • Only 'Static', 'DHCP' are allowed.
InterfaceYes  
Used to select member interfaces in bridge-pair.
Interface confines to:
  • Type is 'ARRAY'.
  • Datatype is 'STRING'.
  • Maximum characters allowed are 15.
  • Multiple values are allowed.
ZoneYes  
Used to select Zones to which the interfaces belong in the bridge-pair.
Zone confines to:
  • Type is 'ARRAY'.
  • Datatype is 'STRING'.
  • Maximum characters allowed are 60.
  • Multiple values are allowed.
  • Duplicate values will not be ignored.
IPAddressNo  
Specify IPv4 Address for IPv4 Configuration.
IPAddress confines to:
  • Type is 'SCALAR'.
  • Datatype is 'IPADDRESS'.
  • Maximum characters allowed are 15.
  • IP Class other than 'MULTICAST', 'RESERVED', 'LOCALHOST', 'UNSPECIFIED', 'BROADCAST', 'NETWORKBROADCAST', 'NETWORKIP' is allowed.
NetmaskNo  
Specify Network Subnet mask for IPv4 Configuration.
Netmask confines to:
  • Type is 'SCALAR'.
  • Datatype is 'IPADDRESS'.
  • Maximum characters allowed are 15.
GatewayNameNo  
Specify Gateway name for IPv4 Configuration.
GatewayName confines to:
  • Type is 'SCALAR'.
  • Datatype is 'STRING'.
  • Maximum characters allowed are 50.
GatewayIPAddressNo  
Specify Gateway IP Address for IPv4 Configuration.
GatewayIPAddress confines to:
  • Type is 'SCALAR'.
  • Datatype is 'IPADDRESS'.
  • Maximum characters allowed are 15.
  • IP Class other than 'MULTICAST', 'RESERVED', 'LOCALHOST', 'UNSPECIFIED', 'BROADCAST', 'NETWORKBROADCAST', 'NETWORKIP' is allowed.
IPv6AddressNo  
Specify IPv6 Address for IPv6 Configuration.
IPv6Address confines to:
  • Type is 'SCALAR'.
  • Datatype is 'IPADDRESS6'.
  • Maximum characters allowed are 45.
  • IP Class other than 'MULTICAST', 'LOCALHOST', 'UNSPECIFIED', 'BROADCAST', 'LINKLOCAL', 'NETWORKBROADCAST', 'NETWORKIP' is allowed.
PrefixNo  
Specify Network Subnet mask Prefix for IPv6 Configuration.
Prefix confines to:
  • Type is 'SCALAR'.
  • Datatype is 'INTEGER'.
  • Range 1 to 128 is allowed.
  • Maximum digits allowed are 40.
IPv6GatewayNameNo  
Specify Gateway Name for IPv6 Configuration.
IPv6GatewayName confines to:
  • Type is 'SCALAR'.
  • Datatype is 'STRING'.
  • Maximum characters allowed are 50.
IPv6GatewayIPAddressNo  
Specify Gateway IP Address for IPv6 Configuration.
IPv6GatewayIPAddress confines to:
  • Type is 'SCALAR'.
  • Datatype is 'IPADDRESS6'.
  • Maximum characters allowed are 45.
  • IP Class other than 'MULTICAST', 'LOCALHOST', 'UNSPECIFIED', 'BROADCAST', 'NETWORKBROADCAST', 'NETWORKIP' is allowed.
MTUYes 1500 
Used to set Maximum Transmission Unit value which is the largest physical packet size.
MTU confines to:
  • Type is 'SCALAR'.
  • Datatype is 'INTEGER'.
  • Range 1280 to 9000 is allowed.
OverrideNo  
Used to override existing MSS with new MSS.
Override confines to:
  • Type is 'SCALAR'.
  • Only 'Enable' are allowed.
MSSValueYes 1460 
Used to set Maximum Segment Size which is the amount of data that can be transmitted in a single packet.
MSSValue confines to:
  • Type is 'SCALAR'.
  • Datatype is 'INTEGER'.
  • Range 536 to 8960 is allowed.
ARPBroadcastNo  
Turn on to allow the bridge to forward ARP broadcasts to the destination MAC address FF:FF:FF:FF:FF:FF.
ARPBroadcast confines to:
  • Type is 'SCALAR'.
  • Only 'Disable', 'Disable', 'Enable' are allowed.
STPNo  
Turn on STP on this bridge pair.
STP confines to:
  • Type is 'SCALAR'.
  • Only 'Disable', 'Enable' are allowed.
ModeNo  
Specify the DHCP mode: Auto or Manual.
Mode confines to:
  • Type is 'SCALAR'.
  • Only 'Auto', 'Manual' are allowed.
DhcpOnlyNo  
Set manual mode to "DHCP only"
DhcpOnly confines to:
  • Type is 'SCALAR'.
  • Only 'Disable', 'Enable' are allowed.
EtherTypeNo  
Select the EtherType that you want to allow on the bridge.
EtherType confines to:
  • Type is 'ARRAY'.
  • Datatype is 'STRING'.
  • Maximum characters allowed are 4.
  • Multiple values are allowed.
  • Duplicate values will be ignored.
DHCPRapidCommitNo  
Select "DHCP rapid commit" for faster client configuration.
DHCPRapidCommit confines to:
  • Type is 'SCALAR'.
  • Only 'Enable' are allowed.
dadNo  
Specify the number of attempts for duplicate address detection.
dad confines to:
  • Type is 'SCALAR'.
  • Datatype is 'INTEGER'.
  • Range 0 to 8 is allowed.
AllowedRAServersNo  
Specify the allowed RA servers.
AllowedRAServers confines to:
  • Type is 'SCALAR'.
  • Datatype is 'STRING'.
VLANFilteringOnBridgeNo  
Turn on VLAN filtering on the bridge pair.
VLANFilteringOnBridge confines to:
  • Type is 'SCALAR'.
  • Only 'Disable', 'Enable' are allowed.
PermittedvlansNo  
Select the VLAN ID or ID range that you want to allow on the bridge.
Permittedvlans confines to:
  • Type is 'ARRAY'.
  • Datatype is 'STRING'.
  • Maximum characters allowed are 10.
  • Multiple values are allowed.
  • Duplicate values will be ignored.
MAXAgeNo  
Set max age value for STP.
MAXAge confines to:
  • Type is 'SCALAR'.
  • Datatype is 'INTEGER'.
  • Range 6 to 40 is allowed.
MACAgingNo  
Set the Ethernet (MAC) address aging time in seconds.
MACAging confines to:
  • Type is 'SCALAR'.
  • Datatype is 'INTEGER'.
  • Range 0 to 65535 is allowed.
AcceptOtherConfigfromDHCPNo  
Set manual mode to "Accept other configuration from DHCP" to configure other parameters, using the DHCPv6 server.
AcceptOtherConfigfromDHCP confines to:
  • Type is 'SCALAR'.
  • Only 'Enable', 'Disable' are allowed.
IPv4Configuration, IPv6ConfigurationNo  
Used to determine whether the IP type is IPv4 or IPv6.
IPv4Configuration,IPv6Configuration confines to:
  • Type is 'ARRAY'.
  • Maximum characters allowed are 2.
  • Only '0', '1' are allowed.
  • Multiple values are allowed.
FilterEthernetFramesNo  
Turn on Ethernet frame filtering on the bridge.
FilterEthernetFrames confines to:
  • Type is 'SCALAR'.
  • Only 'Disable', 'Enable' are allowed.
NameNo  
Specify a descriptive name for the bridge pair.
Name confines to:
  • Type is 'SCALAR'.
  • Datatype is 'STRING'.
  • Maximum characters allowed are 58.



Operation   Status   Message
Add Bridge-Pair200
Add Bridge-Pair500
Add Bridge-Pair502
Add Bridge-Pair503
Add Bridge-Pair504
Add Bridge-Pair508
Add Bridge-Pair510
Add Bridge-Pair541
Add Bridge-Pair542
Add Bridge-Pair543
Add Bridge-Pair544
Add Bridge-Pair549
Add Bridge-Pair551
Edit Bridge-Pair200
Edit Bridge-Pair500
Edit Bridge-Pair503
Edit Bridge-Pair504
Edit Bridge-Pair508
Edit Bridge-Pair510
Edit Bridge-Pair541
Edit Bridge-Pair542
Edit Bridge-Pair543
Edit Bridge-Pair544
Edit Bridge-Pair545
Edit Bridge-Pair546
Edit Bridge-Pair549
Edit Bridge-Pair550
Edit Bridge-Pair551


© Copyright 2019 Sophos Firewall Limited. All rights reserved.
Sophos Firewall is registered trademarks of Sophos Firewall Limited and Sophos Firewall Group. All other product and company names mentioned are trademarks or registered trademarks of their respective owners.
No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical, photocopying, recording or otherwise unless you are either a valid licensee where the documentation can be reproduced in accordance with the license terms or you otherwise have the prior permission in writing of the copyright owner.