Solved: Re: explanation about bridge group - Page 2

Fernando_Meza · ‎05-23-2007

Hi Netpros,

I have some problems understanding the use of the bridge-group command. I have seen it on access points to bridge the radio interfaces with the ethernet interfaces .. I have also seen this on VoIP configs such as the one attached .. but to be honest I am not exactly sure what does it do .. any comments are much appreciated

bridge irb

!

interface Loopback10

ip address 12.1.1.1 255.255.255.255

!

interface Loopback20

ip address 12.8.0.1 255.255.255.255

!

interface Loopback30

ip address 12.10.1.1 255.255.255.255

!

interface Loopback110

ip address 12.10.2.1 255.255.255.255

!

interface Loopback120

ip address 12.10.3.1 255.255.255.255

!

interface Loopback130

ip address 12.10.4.1 255.255.255.255

!

interface Loopback140

ip address 12.10.5.1 255.255.255.255

!

interface Tunnel10

no ip address

tunnel source 12.1.1.1

tunnel destination 12.1.10.1

bridge-group 10

bridge-group 10 spanning-disabled

!

interface Tunnel20

no ip address

tunnel source 12.8.0.1

tunnel destination 12.8.10.1

bridge-group 20

bridge-group 20 spanning-disabled

!

interface Tunnel30

no ip address

tunnel source 12.10.1.1

tunnel destination 12.10.11.1

bridge-group 30

bridge-group 30 spanning-disabled

!

interface Tunnel110

no ip address

tunnel source 12.10.2.1

tunnel destination 12.10.12.1

bridge-group 110

bridge-group 110 spanning-disabled

!

interface Tunnel120

no ip address

tunnel source 12.10.3.1

tunnel destination 12.10.13.1

bridge-group 120

bridge-group 120 spanning-disabled

!

interface Tunnel130

no ip address

tunnel source 12.10.4.1

tunnel destination 12.10.14.1

bridge-group 130

bridge-group 130 spanning-disabled

!

interface Tunnel140

no ip address

tunnel source 12.10.5.1

tunnel destination 12.10.15.1

bridge-group 140

bridge-group 140 spanning-disabled

!

interface Ethernet0/0

description *********** INTERNET CONNECTION ******************

ip address dhcp

half-duplex

no cdp enable

crypto ipsec client ezvpn ezvpnclient

!

interface Ethernet1/0

description ***********

no ip address

half-duplex

!

interface Ethernet1/0.1

description HOME-VLAN

encapsulation dot1Q 1 native

!

interface Ethernet1/0.10

description HQ-Data

encapsulation dot1Q 10

no cdp enable

bridge-group 10

bridge-group 10 spanning-disabled

!

interface Ethernet1/0.20

description BR1-Data

encapsulation dot1Q 20

no cdp enable

bridge-group 20

bridge-group 20 spanning-disabled

!

interface Ethernet1/0.30

description BR2-Data

encapsulation dot1Q 30

no cdp enable

bridge-group 30

bridge-group 30 spanning-disabled

!

interface Ethernet1/0.110

description HQ_Voice

encapsulation dot1Q 110

no cdp enable

bridge-group 110

bridge-group 110 spanning-disabled

!

interface Ethernet1/0.120

description BR1-Voice

encapsulation dot1Q 120

no cdp enable

bridge-group 120

bridge-group 120 spanning-disabled

!

interface Ethernet1/0.130

description BR2-Voice

encapsulation dot1Q 130

no cdp enable

bridge-group 130

bridge-group 130 spanning-disabled

!

interface Ethernet1/0.140

description PSTN

encapsulation dot1Q 140

no cdp enable

bridge-group 140

bridge-group 140 spanning-disabled

!

Richard Burts · ‎05-24-2007

Mohammed

Thank you for the kind words (and for the ratings). I enjoy cooperating with you in the forum. I have done many of these things - and tried many more in the lab. I enjoy sharing what I have learned with others and find the forums an excellent place for this exchange of knowledge.

HTH

Rick

HTH

Rick

mohammedmahmoud · ‎05-24-2007

Rick,

Thank you, you deserve more than i can say, the rating is the least thing that i could do to appreciate your knowledge and your attitude.

Take care, and have a nice day :)

BR,

Mohammed Mahmoud.

Fernando_Meza · ‎05-24-2007

Rick,

Appreciate your expert explanation indeed .. I have followed your posts with Mohamed and things are heaps clearer now .. thank you very much for your invaluable expertise in the subject ..

Cheers,

u.naranjo · ‎10-18-2007

Rick,

I have a similar scenario but the only issue is that I can not ping between the two routers doing the bridging over the ppp connection. do you happen to know why? here is what I have:

Router 1:

interface FastEthernet0

ip address 172.16.4.253 255.255.255.0

no ip route-cache

speed auto

bridge-group 1

interface Serial0

ip unnumbered FastEthernet0

encapsulation ppp

no ip route-cache

no fair-queue

service-module t1 timeslots 1-6

bridge-group 1

bridge 1 protocol ieee

Router 2:

interface FastEthernet0

ip address 172.16.4.254 255.255.255.0

no ip route-cache

speed auto

bridge-group 1

interface Serial0

ip unnumbered FastEthernet0

encapsulation ppp

no ip route-cache

no fair-queue

service-module t1 timeslots 1-6

bridge-group 1

bridge 1 protocol ieee

Richard Burts · ‎10-18-2007

Uriel

Because you have posted only the interface configs I can not tell how close your config really is to the original situation. In the original situation they had configured IRB but I can not tell that you have configured IRB. I suspect that this is the essence of your problem.

To do bridging of IP on an IOS router you need to do either configure IRB or configure "no ip routing" (or to configure CRB which is hardly used any more). I can not tell that you have configured IRB nor that you can configured no ip routing. Without either of these then your router will route IP on these interfaces and will bridge any non-IP traffic. But I doubt that you want to bridge non-IP traffic.

HTH

Rick

HTH

Rick

u.naranjo · ‎10-19-2007

Hi Rick,

No I did not configure IRB all I'm doing is bridging since we can not implement routing in this scenario due to application constraints so the LAN subnet needs to be the same at both ends of the two routers.

Thanks,

Uriel.

Richard Burts · ‎10-19-2007

Uriel

Ok no IRB. Is the router configured with "no ip routing"?

Also if you are not routing then I see no point in having ip unnumbered on the serial interfaces. Try removing these and see if the behavior changes.

HTH

Rick

HTH

Rick

u.naranjo · ‎10-19-2007

Rick,

Yes no ip routing and I'll remove the ip unnumbered command to see if I can ping.

Thanks,

jox198501 · ‎08-12-2019

Hi. Sorry for reviving this old post, but i can't find a solution to this:

i have created most simple bridge example

pc1 --> R1 -->pc2
i have bridged both router ethernet ports like you described, and assigned addresses:

pc1 1.1.1.1/24 no DG

pc2 1.1.1.2/24 no DG, but i cant ping pc1 from pc2 and vice versa

ARP broadcast request is just not passing through the bridged router...

Thanks

p.s.SORRY FOR BOTHERING, I'V SOLVED IT. CHEERS