On Fri, Feb 18, 2022 at 04:51:44PM +0100, Hans Schultz wrote: > In a 802.1X scenario, clients connected to a bridge port shall not > be allowed to have traffic forwarded until fully authenticated. > A static fdb entry of the clients MAC address for the bridge port > unlocks the client and allows bidirectional communication. > > This scenario is facilitated with setting the bridge port in locked > mode, which is also supported by various switchcore chipsets. > > Signed-off-by: Hans Schultz <schultz.hans+netdev@xxxxxxxxx> With Nik's comment fixed: Reviewed-by: Ido Schimmel <idosch@xxxxxxxxxx>