Bridge Interface Enhancements in Zyxel USG FLEX H Series [uOS] Firewalls

Zyxel has introduced several enhancements to the Bridge Interface configuration, simplifying management and ensuring consistent behavior across the GUI. These changes make it easier for administrators to configure bridges while reducing errors caused by unsupported parameters.

Example Configuration

• WAN interface: 203.0.113.10/255.255.255.0

• LAN interfaces: 192.168.169.1/255.255.255.0, 192.168.168.1/255.255.255.0

• Bridge member: VLAN10

(All IP addresses shown are example/test values.)

Simplified Interface Membership

• Administrators can now add any interface into a bridge without restriction.

• Some parameters may not apply when interfaces are added to a bridge, so the system now enforces necessary adjustments automatically.

• This prevents confusion about which interface parameters remain effective once bridged.

GUI Enhancements

The new GUI ensures that unsupported configurations are removed or blocked when an interface is added as a bridge member:

• The interface must not be referenced by any configuration (except Zone).

• The IP address of an interface must be set to 0.0.0.0 before it can join a bridge.

• The location of bridge creation is unified with External, Internal, and General interface settings.

Role Selection and Layout Changes

When creating a bridge interface, administrators can assign its role:

• External

• Internal

• General

The interface layout groups settings clearly under each category, helping administrators easily identify and manage bridge members.

Zone and Member Configuration

When adding an interface to a bridge:

• Interfaces must be unassigned from any IP address.

• Interfaces cannot be referenced by other objects or policies (except Zone).

• Members can include Ethernet and VLAN interfaces that are not already part of another bridge

Automatic Reference Checks

To prevent misconfiguration, the firewall now automatically checks if an interface is referenced before allowing it to be added to a bridge.
This validation ensures smooth configuration and prevents conflicts.

New Bridge Interface Type

• A dedicated Bridge interface type has been introduced to the interface table.

• The label “Ports” has been renamed to “Members” for better clarity.

Benefits

These enhancements provide:

• Consistency in interface management.

• Error prevention by blocking invalid configurations.

• Improved usability through a streamlined and intuitive GUI.

• Better visibility into interface roles and bridge members.