- Only one MAC address per member is allowed. This limits the risk of loop on the network.
- Only 3 Ethertypes are allowed:
- 0x0800 - IPv4
- 0x0806 - ARP
- 0x86dd - IPv6
ICMPv6 and ARP traffic are "rate-limited". "unknown-unicast" traffic, which is broadcasted by the platform, is also "rate-limited".
A global filter is denying STP and bridging protocols. Link layer protocols and IPv6 Router Advertisement/Router Solicitation (RA/RS) are also filtered by the platform.