[pve-devel] [PATCH pve-docs 1/1] add vxlan l3 routing

[Dietmar Maurer]

> >>What about other bridges in the system which does not use vxlan at all
> >>(firewall
> >>bridges)?
> 
> mmm, good question. I think you can put it in the vrf or not.
> as they don't have any ip address, and it's only layer2, it's not a problem.

See: https://vincent.bernat.im/en/blog/2017-linux-bridge-isolation 

Such bridge accepts packets anyways - not sure how severe that problem is...