On Fri, Feb 18, 2022 at 04:51:44PM +0100, Hans Schultz wrote:

In a 802.1X scenario, clients connected to a bridge port shall not
be allowed to have traffic forwarded until fully authenticated.
A static fdb entry of the clients MAC address for the bridge port
unlocks the client and allows bidirectional communication.

This scenario is facilitated with setting the bridge port in locked
mode, which is also supported by various switchcore chipsets.

Signed-off-by: Hans Schultz <redacted>

With Nik's comment fixed:

Reviewed-by: Ido Schimmel <idosch@nvidia.com>