Routing and Bridge Interfaces

Security Gateways with a Bridge interface can support Layer 3 routing over non-bridged interfaces.

If you configure a Bridge interface with an IP address on a Security Group, the Bridge interface functions as a regular Layer 3 interface.

The Bridge interface participates in IP routing decisions on the Security Group and supports Layer 3 routing.

• Cluster deployments do not support this configuration.

• You cannot configure the Bridge interface to be the nexthop gateway for a route.

• A Security Group can support multiple Bridge interfaces, but only one Bridge interface can have an IP address.

• A Security Group cannot filter or transmit packets that it inspected before on a Bridge interface (to avoid double-inspection).