2 sides of my bridge cant see each other
-
heres the config:
Shell Output - ifconfig bridge0
bridge0: flags=1028943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST,PPROMISC,LOWER_UP> metric 0 mtu 1500
description: BR1_IGB3_BXE1_VL710_IOT_Bridge
options=0
ether 58:9c:fc:10:ff:d8
inet 222.20.20.1 netmask 0xffffff00 broadcast 222.20.20.255
inet6 fe80::5a9c:fcff:fe10:ffd8%bridge0 prefixlen 64 scopeid 0x13
id 00:00:00:00:00:00 priority 32768 hellotime 2 fwddelay 15
maxage 20 holdcnt 6 proto rstp maxaddr 2000 timeout 1200
root id 00:00:00:00:00:00 priority 32768 ifcost 0 port 0
member: igb3.710 flags=543<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>
ifmaxaddr 0 port 17 priority 128 path cost 55
member: igb0.710 flags=543<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>
ifmaxaddr 0 port 16 priority 128 path cost 55
groups: bridge
nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>They always seem to be stuck in learning mode. To be clear this is a VLAN bridge. Both sides can see the internet just fine.
Stuck. Any ideas?
-
The bridge members are supposed to be 'learning', that's normal.
What firewall rules do you have?
How is the bridge filtering configured?
https://docs.netgate.com/pfsense/en/latest/bridges/firewall.html#bridging-and-firewallingHow are you testing?
-
Found it -
needed to set:
net.link.bridge.pfil_member
net.link.bridge.pfil_bridgeboth to zero.
-
Doing so removes all filtering. You can have filtering as long as you have the rules to pass traffic you need.