# Can F5 be in Bridge Mode or a L2 DDOS to protect from L3-L4 DDOS attack **URL:** \ **Category:** Technical Forums\ **Tags:** afm, security, application-delivery\ **Created:** [April 4, 2023, 3:49pm UTC](https://community.f5.com/t/can-f5-be-in-bridge-mode-or-a-l2-ddos-to-protect-from-l3-l4-ddos-attack/72044 "2023-04-04T15:49:28Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![T0nyP](https://d1p9zq3aats0t8.cloudfront.net/user_avatar/community.f5.com/t0nyp/32/14257_2.png) [@T0nyP](https://community.f5.com/u/T0nyP)\ **Post date:** [April 4, 2023, 3:49pm UTC](https://community.f5.com/t/can-f5-be-in-bridge-mode-or-a-l2-ddos-to-protect-from-l3-l4-ddos-attack/72044/1 "2023-04-04T15:49:28Z")
Hi F5 community, We just want to consult if F5 rSeries models ( Active-Standby HA setup ) with AFM license is capable to do bridge mode to cater L3-L4 DDOS protection before it goes to Internet Perimeter FW. We ask this so that there will be no re-architecture or change of config about the Public IP defined in the Internet Perimeter FW. If you have any document experience or KB article pertaining to this it will be a great help to us. Thank you in advance. ---
**Author:** ![Paulius](https://d1p9zq3aats0t8.cloudfront.net/user_avatar/community.f5.com/paulius/32/21698_2.png) [@Paulius](https://community.f5.com/u/Paulius)\ **Post date:** [April 4, 2023, 4:22pm UTC](https://community.f5.com/t/can-f5-be-in-bridge-mode-or-a-l2-ddos-to-protect-from-l3-l4-ddos-attack/72044/2 "2023-04-04T16:22:38Z")
@T0nyP This seems like what you are looking for but not 100%. > **[Configuring a BIG-IP System with iSession in Bridge Mode](https://techdocs.f5.com/kb/en-us/products/big-ip-aam/manuals/product/aam-network-configuration-12-1-0/8.html)** ---
**Author:** ![Nikoolayy1](https://d1p9zq3aats0t8.cloudfront.net/user_avatar/community.f5.com/nikoolayy1/32/3589_2.png) [@Nikoolayy1](https://community.f5.com/u/Nikoolayy1)\ **Post date:** [April 10, 2023, 7:32am UTC](https://community.f5.com/t/can-f5-be-in-bridge-mode-or-a-l2-ddos-to-protect-from-l3-l4-ddos-attack/72044/3 "2023-04-10T07:32:31Z")
You mean vlangroup or vwire ? rSeries with the latest 1.3.x software now supports vwire [F5 Cloud Docs](https://clouddocs.f5.com/f5os/F5OS-A/v1.3.0/F5OS-A-1.3.0-virtual-wire-support-cBIP-15.1.8.html) and I have done AFM DOS on vwire (not on rSeries but the same should be true). As you may not have self-ip things like tcp cookies (afm AFM TCP Half Open vector) may not work in vWire but dropping tcp sync fload attack will work, so there are some small limitations to keep in mind. ---
**Author:** ![T0nyP](https://d1p9zq3aats0t8.cloudfront.net/user_avatar/community.f5.com/t0nyp/32/14257_2.png) [@T0nyP](https://community.f5.com/u/T0nyP)\ **Post date:** [April 11, 2023, 1:08am UTC](https://community.f5.com/t/can-f5-be-in-bridge-mode-or-a-l2-ddos-to-protect-from-l3-l4-ddos-attack/72044/4 "2023-04-11T01:08:13Z")
Highly appreciate your guidance and thanks much for informing me about vWire feature for L2 DDOS Setup. Additonal inquiry only. Do we still need to setup a FW policy? And in what context do you recommend to apply the FW policy? Thanks in advance. ---
**Author:** ![Nikoolayy1](https://d1p9zq3aats0t8.cloudfront.net/user_avatar/community.f5.com/nikoolayy1/32/3589_2.png) [@Nikoolayy1](https://community.f5.com/u/Nikoolayy1)\ **Post date:** [April 11, 2023, 8:28am UTC](https://community.f5.com/t/can-f5-be-in-bridge-mode-or-a-l2-ddos-to-protect-from-l3-l4-ddos-attack/72044/5 "2023-04-11T08:28:37Z")
I can’t tell you if you need AFM policy as this is something that you need to be aware of as admin of the network environment if you need not only DOS protection but also security rules. The AFM policy is usually global for such deployments but if you do not have good knowedge in AFM  and rSeries better involve F5 PS as you are risking to much as the Devcentral community that F5 professionals are helping each other for some basic or complex questions can’t replace training or a PS consultant. ---
**Author:** ![T0nyP](https://d1p9zq3aats0t8.cloudfront.net/user_avatar/community.f5.com/t0nyp/32/14257_2.png) [@T0nyP](https://community.f5.com/u/T0nyP)\ **Post date:** [April 11, 2023, 8:34am UTC](https://community.f5.com/t/can-f5-be-in-bridge-mode-or-a-l2-ddos-to-protect-from-l3-l4-ddos-attack/72044/6 "2023-04-11T08:34:46Z")
Thanks for this clarification and reply. Totally agree on this. ---
**Author:** ![LiefZimmerman](https://d1p9zq3aats0t8.cloudfront.net/user_avatar/community.f5.com/liefzimmerman/32/3355_2.png) [@LiefZimmerman](https://community.f5.com/u/LiefZimmerman)\ **Post date:** [October 19, 2023, 4:52pm UTC](https://community.f5.com/t/can-f5-be-in-bridge-mode-or-a-l2-ddos-to-protect-from-l3-l4-ddos-attack/72044/7 "2023-10-19T16:52:20Z")
@T0nyP  - noticed this sorta old conversation that looks like it was resolved? If so…it would be great if you could choose **Accept As Solution** on as many replies as you considered helpful. Thanks for being part of our community. ---
**Author:** ![Zdenek](https://avatars.discourse-cdn.com/v4/letter/z/5f8ce5/32.png) [@Zdenek](https://community.f5.com/u/Zdenek)\ **Post date:** [March 18, 2025, 12:50pm UTC](https://community.f5.com/t/can-f5-be-in-bridge-mode-or-a-l2-ddos-to-protect-from-l3-l4-ddos-attack/72044/8 "2025-03-18T12:50:43Z")
Hi, we have rSeries box with 1.7.0 software and I dont see vwire option in a network configuration of my bigip box. Do you know what platforms are supported, I only found this [old article](https://techdocs.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-virtual-wire-layer2-transparency-13-1-0/2.html). Thanks