Bridge

ToolsCopy Anchor Link

• Create Bridge Interface
• List Bridge Interfaces
• Get Bridge Interface Detail
• Update Bridge Interface Settings
• Remove Bridge Interface
• Add Bridge Port (Enslave Interface)
• List Bridge Port Memberships
• Remove Bridge Port (Release Interface)
• List Bridge MAC Address (Host) Table
• Add Bridge VLAN Table Entry
• List Bridge VLAN Table Entries

create_bridgeCopy Anchor Link

Create Bridge Interface · Risk: write

Creates a bridge interface (/interface bridge) — combines multiple interfaces into a Layer-2 switch domain. For VLAN migration read get_vlan_segmentation_guide first. Stage a new bridge with filtering off; enable it LAST after VLAN membership and protected management access are ready. Set protocol_mode for STP/RSTP/MSTP spanning-tree. For adding a member interface to an existing bridge use add_bridge_port; for standalone 802.1Q VLAN sub-interfaces use create_vlan_interface. Returns the created bridge's full detail including its .id.

list_bridgesCopy Anchor Link

List Bridge Interfaces · Risk: read

Lists bridge interfaces (/interface bridge). Use to enumerate all bridge domains or confirm whether a named bridge exists. For member ports enslaved to a bridge use list_bridge_ports; for the VLAN membership table use list_bridge_vlans; for learned MAC addresses use list_bridge_hosts. Optional name_filter does a partial name match. Returns bridge name, MTU, VLAN-filtering flag, and STP state.

get_bridgeCopy Anchor Link

Get Bridge Interface Detail · Risk: read

Fetches full detail for a single bridge interface (/interface bridge print detail). Use to inspect STP/MSTP state, VLAN-filtering flag, MTU, MAC address, and operational status for one bridge. For all bridges use list_bridges; for the member ports of this bridge use list_bridge_ports. Requires the exact bridge name.

update_bridgeCopy Anchor Link

Update Bridge Interface Settings · Risk: write-idempotent

Modifies settings on an existing bridge interface (/interface bridge set). Use to rename a bridge (new_name), toggle VLAN filtering, change STP/RSTP/MSTP protocol mode, adjust MTU, or enable/disable the bridge. VLAN filtering can interrupt management: read get_vlan_segmentation_guide, verify CPU membership, PVID/admission and recovery access before enabling it LAST. Do not disable existing filtering to simplify migration. For adding or removing member interfaces use add_bridge_port / remove_bridge_port; for VLAN table entries use add_bridge_vlan. Identified by the current bridge name; supply only the fields you want to change.

remove_bridgeCopy Anchor Link

Remove Bridge Interface · Risk: destructive

Deletes a bridge interface (/interface bridge remove). Verifies existence first and returns an error if the bridge is not found. Removing the bridge also releases all enslaved member ports. To detach a single member without deleting the bridge use remove_bridge_port. Identified by bridge name.

add_bridge_portCopy Anchor Link

Add Bridge Port (Enslave Interface) · Risk: write

Enslaves an interface as a member port of a bridge (/interface bridge port add). Use to add an Ethernet, VLAN sub-interface, or other interface type to an existing bridge domain. Set pvid (1-4094) to assign the port's native/untagged VLAN; set hw=true to enable hardware offload. To create the bridge itself first use create_bridge; to add a VLAN entry to the bridge VLAN table use add_bridge_vlan; for standalone VLAN sub-interfaces use create_vlan_interface. Returns the new port entry's detail.

list_bridge_portsCopy Anchor Link

List Bridge Port Memberships · Risk: read

Lists bridge port memberships (/interface bridge port print). Use to see which interfaces are enslaved to a bridge, their PVID, horizon, and hardware-offload status. For the bridge interfaces themselves use list_bridges; for MAC addresses learned on the bridge use list_bridge_hosts; for VLAN table entries use list_bridge_vlans. Filter by exact bridge_filter (bridge name) or interface_filter (member interface name).

remove_bridge_portCopy Anchor Link

Remove Bridge Port (Release Interface) · Risk: destructive

Detaches a member interface from its bridge (/interface bridge port remove). Verifies the port exists first and returns an error if not found. Releases the interface back to standalone mode without deleting the bridge itself. To delete the entire bridge (and release all ports) use remove_bridge. Identified by the member interface name.

list_bridge_hostsCopy Anchor Link

List Bridge MAC Address (Host) Table · Risk: read

Lists the learned MAC forwarding table of a bridge (/interface bridge host print). Use to see which MAC addresses are known on each bridge port — useful for Layer-2 troubleshooting and verifying device reachability. This is the bridge forwarding database, not the ARP table (ARP maps IP-to-MAC; use ARP tools for that). Not the same as list_bridge_ports (which lists enslaved interfaces, not learned MACs). Filter by exact bridge_filter; returns MAC address, port, age, and dynamic/static flag.

add_bridge_vlanCopy Anchor Link

Add Bridge VLAN Table Entry · Risk: write

Adds a VLAN membership entry to a bridge's 802.1Q VLAN table (/interface bridge vlan add). Use to define which ports carry a specific VLAN as tagged (trunk) or untagged (access). Entries can be staged BEFORE enabling filtering; filtering enforces membership and should be enabled LAST after management is protected. For routed VLANs verify tagged bridge/CPU membership. Use one VLAN ID per entry containing access ports and align their PVID/admission; read get_vlan_segmentation_guide first. vlan_ids accepts a single ID (e.g. '100') or comma-separated list (e.g. '100,200'); tagged and untagged accept comma-separated interface names. For standalone 802.1Q VLAN sub-interfaces use create_vlan_interface; for listing existing VLAN table entries use list_bridge_vlans; for setting per-port native VLAN use the pvid parameter in add_bridge_port.

list_bridge_vlansCopy Anchor Link

List Bridge VLAN Table Entries · Risk: read

Lists VLAN membership entries from the bridge VLAN table (/interface bridge vlan print). Use to inspect which ports are tagged or untagged for each VLAN on a bridge where vlan-filtering is active. For standalone 802.1Q VLAN sub-interfaces (not bridge VLAN table) use create_vlan_interface and related VLAN tools; for bridge port PVID (native VLAN) settings use list_bridge_ports. Filter by exact bridge_filter; returns VLAN IDs with their tagged and untagged port lists.