How to add network bridge with nmcli (NetworkManager) on Linux

I am using Debian Linux 9 “stretch” on the desktop. I would like to create network bridge with NetworkManager. But, I am unable to find the option to add br0. How can I create or add network bridge with nmcli for NetworkManager on Linux?

A bridge is nothing but a device which joins two local networks into one network. It works at the data link layer, i.e., layer 2 of the OSI model. Network bridge often used with virtualization and other software. Disabling NetworkManager for a simple bridge especially on Linux Laptop/desktop doesn’t make any sense. The nmcli tool can create Persistent bridge configuration without editing any files. This page shows how to create a bridge interface using the Network Manager command line tool called nmcli.

How to create/add network bridge with nmcli

The procedure to add a bridge interface on Linux is as follows when you want to use Network Manager:

  1. Open the Terminal app
  2. Get info about the current connection:
    nmcli con show
  3. Add a new bridge:
    nmcli con add type bridge ifname br0
  4. Create a slave interface:
    nmcli con add type bridge-slave ifname eno1 master br0
  5. Turn on br0:
    nmcli con up br0

Let us see how to create a bridge, named br0 in details.

Get current network config

You can view connection from the Network Manager GUI in settings:
Getting Network Info on Linux
Another option is to type the following command:
$ nmcli con show
$ nmcli connection show --active

View the connections with nmcli
I have a “Wired connection 1” which uses the eno1 Ethernet interface. My system has a VPN interface too. I am going to setup a bridge interface named br0 and add, (or enslave) an interface to eno1.

How to create a bridge, named br0

$ sudo nmcli con add ifname br0 type bridge con-name br0
$ sudo nmcli con add type bridge-slave ifname eno1 master br0
$ nmcli connection show

Create bridge interface using nmcli on Linux
You can disable STP too:
$ sudo nmcli con modify br0 bridge.stp no
$ nmcli con show
$ nmcli -f bridge con show br0

The last command shows the bridge settings including disabled STP:

bridge.mac-address:                     --
bridge.stp:                             no
bridge.priority:                        32768
bridge.forward-delay:                   15
bridge.hello-time:                      2
bridge.max-age:                         20
bridge.ageing-time:                     300
bridge.multicast-snooping:              yes

How to turn on bridge interface

You must turn off “Wired connection 1” and turn on br0:
$ sudo nmcli con down "Wired connection 1"
$ sudo nmcli con up br0
$ nmcli con show

Use ip command to view the IP settings:
$ ip a s
$ ip a s br0

Build a network bridge with nmcli on Linux

Optional: How to use br0 with KVM

Now you can connect VMs (virtual machine) created with KVM/VirtualBox/VMware workstation to a network directly without using NAT. Create a file named br0.xml for KVM using vi command or cat command:
$ cat /tmp/br0.xml
Append the following code:

  <forward mode="bridge"/>
  <bridge name="br0" />

Run virsh command as follows:
# virsh net-define /tmp/br0.xml
# virsh net-start br0
# virsh net-autostart br0
# virsh net-list --all

Sample outputs:

 Name                 State      Autostart     Persistent
 br0                  active     yes           yes
 default              inactive   no            yes

For more info read the following man page:
$ man ip
$ man nmcli

🐧 Get the latest tutorials on Linux, Open Source & DevOps via RSS feed or Weekly email newsletter.

🐧 2 comments so far... add one

CategoryList of Unix and Linux commands
Disk space analyzersncdu pydf
File Managementcat
FirewallAlpine Awall CentOS 8 OpenSUSE RHEL 8 Ubuntu 16.04 Ubuntu 18.04 Ubuntu 20.04
Network UtilitiesNetHogs dig host ip nmap
OpenVPNCentOS 7 CentOS 8 Debian 10 Debian 8/9 Ubuntu 18.04 Ubuntu 20.04
Package Managerapk apt
Processes Managementbg chroot cron disown fg jobs killall kill pidof pstree pwdx time
Searchinggrep whereis which
User Informationgroups id lastcomm last lid/libuser-lid logname members users whoami who w
WireGuard VPNAlpine CentOS 8 Debian 10 Firewall Ubuntu 20.04
2 comments… add one
  • Ubuntuquity Aug 24, 2020 @ 21:08

    I did everything what is to the “Optional: How to use br0 with KVM” but substituting the “eno1” interface name to the “wlp2s0”. This is the name of WiFi inteface on my laptop. After I issue “sudo nmcli con down MYSSID” command my Ubuntu 18.04 laptop disconnects from the internet and the br0 bridge still does not have the IP (I know, laptop just lost its connection to the network so how come? :D). What is wrong with my setup?

    • 🐧 Vivek Gite Aug 25, 2020 @ 7:38

      WiFi is not possible. It only works with Ethernet

      Note that a bridge cannot be established over Wi-Fi networks operating in Ad-Hoc or Infrastructure modes. This is due to the IEEE 802.11 standard that specifies the use of 3-address frames in Wi-Fi for the efficient use of airtime.

Leave a Reply

Your email address will not be published.

Use HTML <pre>...</pre> for code samples. Still have questions? Post it on our forum