diff --git a/doc/img/mac-bridge.svg b/doc/img/mac-bridge.svg
new file mode 100644
index 00000000..9ca2e5c7
--- /dev/null
+++ b/doc/img/mac-bridge.svg
@@ -0,0 +1,3 @@
+
+
+
\ No newline at end of file
diff --git a/doc/img/vlan-bridge.svg b/doc/img/vlan-bridge.svg
new file mode 100644
index 00000000..e7e5e8ff
--- /dev/null
+++ b/doc/img/vlan-bridge.svg
@@ -0,0 +1,3 @@
+
+
+
\ No newline at end of file
diff --git a/doc/networking.md b/doc/networking.md
index f6ac9426..3e7a9314 100644
--- a/doc/networking.md
+++ b/doc/networking.md
@@ -143,6 +143,8 @@ a switch is a bridge. In Linux, setting up a bridge with ports
connected to physical switch fabric, means you manage the actual switch
fabric!
+#### MAC Bridge
+
In Infix ports are by default not switch ports, unless the customer
specific factory config sets it up this way. To enable switching
between ports you create a bridge and then add ports to that
@@ -165,6 +167,13 @@ Here we add two ports to bridge `br0`: `eth0` and `eth1`.
> Other "magic" names are `ethN.M` for VLAN M on top of `ethN`, or
> `dockerN` to create an IP masquerading container bridge.
+
+
+It is possible to create multiple MAC bridges, however, it is
+currently[^5] _not recommended_ to use more than one MAC bridge on
+products with Marvell LinkStreet switching ASICs. A VLAN filtering
+bridge should be used instead.
+
#### VLAN Filtering Bridge
By default bridges in Linux do not filter based on VLAN tags. It can be
@@ -196,11 +205,13 @@ or for routing, the bridge must become a (tagged) member of the VLAN.
admin@example:/config/interface/br0/> set bridge vlans vlan 10 tagged br0
admin@example:/config/interface/br0/> set bridge vlans vlan 20 tagged br0
```
+
> To route or to manage via a VLAN, a VLAN interface needs to be created
> on top of the bridge, see section [VLAN Interfaces](#vlan-interfaces)
> below for more on this topic.
+
#### Multicast Filtering and Snooping
Multicast filtering in the bridge is handled by the bridge itself. It
@@ -1126,3 +1137,6 @@ currently supported, namely `ipv4` and `ipv6`.
[^4]: A YANG deviation was previously used to make it possible to set
`phys-address`, but this has been replaced with the more flexible
`custom-phys-address`.
+[^5]: Infix MAC bridges on Marvell Linkstreet devices are currently
+ limited to use a single MAC database, causing issues if the same
+ MAC address appears on different MAC bridges.