Configuring Transparent Bridging
Transparent and SRT Bridging Configuration Task List
BC-31
Cisco IOS Bridging and IBM Networking Configuration Guide
The primary application of transparently bridged VLANs constructed in this way is to separate traffic
between bridge groups of local network interfaces, to multiplex bridged traffic from several bridge
groups on a shared interface (LAN or HDLC serial), and to form VLANs composed of collections of
bridge groups on several routers. These VLANs improve performance because they reduce the
propagation of locally bridged traffic, and they improve security benefits because they completely
separate traffic.
In Figure 9, different bridge groups on different routers are configured into three VLANs that span the
bridged network. Each bridge group consists of conventionally bridged local interfaces and a
subinterface on the backbone FDDI LAN. Bridged traffic on the subinterface is encapsulated and
“colored” with a VLAN identifier known as a security association identifier common to all bridge
groups participating in the VLAN. In addition, bridges only accept packets bearing security association
identifiers for which they have a configured subinterface. Thus, a bridge group is configured to
participate in a VLAN if it contains a subinterface configured with the VLAN’s characteristic security
association identifier. See the “Complex Integrated Routing and Bridging Example” section on page66
for an example configuration of the topology shown in Figure9.
Note The 802.10 encapsulation used to “color” transparently bridged packets on subinterfaces
might increase the size of a packet so that it exceeds the MTU size of the LAN from which
the packet originated. To avoid MTU violations on the shared network, the originating
LANs must either have a smaller native MTU than the shared network (as is the case from
Ethernet to FDDI), or the MTU on all packet sources on the originating LAN must be
configured to be at least 16 bytes less than the MTU of the shared network.
Figure 9 Transparently Bridged VLANs on an FDDI Backbone
Bridge
group 18
"Striped"
packets
Bridge
group 54
"Dot"
packets
Bridge
group 3
"Sliced"
packets
Bridge
group 7
"Sliced"
packets
Bridge
group 8
"Dot"
packets
Bridge
group 1
"Sliced"
packets
Bridge
group 6
"Striped"
packets
Router 1 Router 2
Router 3
Shared network
"Striped"
packets
"Dot"
packets
"Sliced"
packets
S3228