Configure Bridge Batch

POST /vyos/firewall/bridge/batch

Configure bridge firewall using batch operations.

This is the main endpoint for configuring bridge firewall rules. All operations are version-aware and sent to VyOS in a single batch for efficiency.

Chain Operations:

Operation	Value Required	Description
`set_chain`	No	Create/enable chain
`delete_chain`	No	Delete chain
`set_chain_default_action`	Yes	Set default action (accept, drop)
`delete_chain_default_action`	No	Delete default action
`set_chain_description`	Yes	Set chain description
`delete_chain_description`	No	Delete chain description

Rule Operations (require rule_number):

Operation	Value Required	Description
`set_rule`	No	Create rule
`delete_rule`	No	Delete rule
`set_rule_action`	Yes	Set action (accept, drop, continue, jump, notrack)
`delete_rule_action`	No	Delete action
`set_rule_description`	Yes	Set rule description
`delete_rule_description`	No	Delete rule description
`set_rule_disable`	No	Disable rule
`delete_rule_disable`	No	Enable rule
`set_rule_log`	No	Enable logging
`delete_rule_log`	No	Disable logging

Source/Destination MAC:

Operation	Value Required	Description
`set_rule_source_mac`	Yes	Match source MAC (e.g., 00:11:22:33:44:55)
`delete_rule_source_mac`	No	Remove source MAC filter
`set_rule_destination_mac`	Yes	Match destination MAC
`delete_rule_destination_mac`	No	Remove destination MAC filter

VLAN Matching:

Interface Matching:

Operation	Value Required	Description
`set_rule_inbound_interface`	Yes	Match inbound interface name
`delete_rule_inbound_interface`	No	Remove inbound interface filter
`set_rule_inbound_interface_group`	Yes	Match inbound interface group
`delete_rule_inbound_interface_group`	No	Remove inbound interface group
`set_rule_outbound_interface`	Yes	Match outbound interface name
`delete_rule_outbound_interface`	No	Remove outbound interface filter
`set_rule_outbound_interface_group`	Yes	Match outbound interface group
`delete_rule_outbound_interface_group`	No	Remove outbound interface group

VyOS 1.5+ Only:

Operation	Value Required	Description
`set_rule_ethernet_type`	Yes	Match ethernet type (arp, ipv4, ipv6, 802.1q)
`delete_rule_ethernet_type`	No	Remove ethernet type filter
`set_rule_jump_target`	Yes	Set jump target chain
`delete_rule_jump_target`	No	Remove jump target
`set_rule_set_dscp`	Yes	Set DSCP value (0-63)
`delete_rule_set_dscp`	No	Remove DSCP modification
`set_rule_set_mark`	Yes	Set packet mark
`delete_rule_set_mark`	No	Remove packet mark
`set_rule_set_vlan_priority`	Yes	Set VLAN priority (0-7)
`delete_rule_set_vlan_priority`	No	Remove VLAN priority modification

Custom Chain Operations:

Operation	Value Required	Description
`set_custom_chain`	No	Create custom chain
`delete_custom_chain`	No	Delete custom chain
`set_custom_chain_description`	Yes	Set custom chain description
`delete_custom_chain_description`	No	Delete custom chain description
`set_custom_chain_default_action`	Yes	Set custom chain default action
`delete_custom_chain_default_action`	No	Delete custom chain default action

Requires WRITE permission on FIREWALL_BRIDGE feature.

Request

Successful Response