Setting Firewall Rules for Bridge Interfaces

Is there an option for setting firewall rules for bridge groups? I have like 8 ports and thus would be annoying to have to individually slap them on there


What version are you using? For 1.4 you can try using command below. Let us know if this works for you.

vyos@vyos# set firewall interface <bridge interface> in name <firewall rule>

I am using 1.4, and this seems to work perfectly. Correct me if I’m wrong but I’d assign them let sub interface like br0.2 for vlan 2 right?

L3 firewall rules indeed go on to layer3 brx.y interface (VLAN Y on BridgeX)

Note this doesn’t block traffic between multiple interfaces on same bridge , which resembles layer2 filtering.
Not sure if that can even be done…in VyOS

1 Like

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.