Owner's Manual

573
Allowed or Denied Commands
These fields let you enter regular expressions for commands and configurations to allow or deny.
Permissions
Select from the operation categories available, moving the desired permissions to the Selected
Privileges
on the right side of the table.
Click
Apply to accept your edits, and Cancel to abandon them. The Configure button at the
bottom of this screen sends your login(s) to the device. The
Refresh button queries to update
information displayed.
Integrated Bridging -> Bridge Domain
On MX routers, you can configure Integrated Routing and Bridging (IRB) with the IRB interface at
the bridge domain level of the configuration. Configure IRB ports with port and unit screens. If an
IRB port does not exist on the selected device, resync creates an empty one to allow access to these
screens. Discovery also finds existing IRB ports.
IRB provides simultaneous support for Layer 2 (L2) bridging and Layer 3 (L3) routing within the
same bridge domain. Packets arriving on an interface of the bridge domain are L2 switched or L3
routed based on the destination MAC address. Packets addressed to the router's MAC address are
routed to other L3 interfaces. If the MAC address on the arriving frame is the same as that of the
IRB interface, then the packet inside the frame is routed. Otherwise, the MAC address is learned or
looked up in the MAC address database. The Virtual Router Redundancy Protocol (VRRP) is
configured on the IRB interface so that both links can carry traffic between the bridge domain and
the router network. See Protocols -> VRRP Groups on page 529 for more about VRRP Groups that
include IRB.
The following screen lets you manage the Bridge Domains for the selected equipment.