Hello
I put 2 port in bridge with out internet or any setting
then i use port 1 for nvr and port 2 for ip cam then the ip cam not work
but when i disable the ( bridge-setting ip firewall ) its work well
is there any way to enable ip firewall and the ip cam not stoped .
If you don’t show the configuration only the crystal ball can help
The use-ip-firewall setting under interface/bridge/settings is used to force also packets that are bridged (forwarded at L2 level) from one port of a bridge to another port of the same bridge (like your NVR and your camera) through the IP firewall. The original purpose of this setting is to allow QoS handling of such traffic by enqueueing it, but running bridged traffic through IP firewall has a number of side effects that you have to mitigate using dedicated IP firewall rules if you want to use that setting. Packets that are routed (forwarded at L3 level) between the hosts connected to the bridge and hosts in other subnets (that are only reachable using routing) pass through the IP firewall automatically, there is no need to set use-ip-firewall to yes to ensure that.
From a basic perspective, a single subnet and bridge work well to allow use of ones wired and wifi ports on one network.
There is no need to use IP Bridge filtering here.
USE NORMAL FIREWALL RULES to separate traffic at layer 3.
If you had two subnets one for the bridge and most wired and wifi ports but wanted a different subnet on one port, then simply assign, that address to the single port.
They will be separated at layer2, one subnet on the bridge one subnet off the bridge.
Use firewall rules at layer 3 to ensure the two subnets do not communicate with each other if that is the requirement.
Alternatively when it gets complicated and you have a mix of subnets and ports etc, its easier to use vlans for all subnets and the bridge does no dchp.