search for: arp_ignor

I have a working LVS-Setup on CentOS 5.4 with the following settings in sysctl.conf: net.ipv4.conf.lo.arp_ignore = 1 net.ipv4.conf.lo.arp_announce = 2 net.ipv4.conf.all.arp_ignore = 1 net.ipv4.conf.all.arp_announce = 2 Now I''d like to use shorewall, but after activating it, shorewall changes both arp_ignore values to 0. I just found out how to set arp_ignore for separate interfaces, but not for the...

hi list I have a strange problem here. Maybe it is normal behavior and i search within the wrong direction. Probably someone here can give me a hint. I have a device (rhel4 kernel 2.6.9) with 3 interfaces. 2 interfaces (eth0, eth2) are bridged together (br0) and the bridge device has an ip address assigned (192.168.11.15). Another interface (eth1) has assigned 10.7.0.10. So far so good.

...looked at arp* /etc/sysctl.conf etc. and arptables, but wondered if anyone had a recipe? We have this already which didn't help as it happened Christmas Eve too as we kept eth1 up for a few days to test: # For the dual interface - 06.12.12 net.ipv4.conf.eth0.arp_filter = 1 net.ipv4.conf.eth0.arp_ignore = 1 net.ipv4.conf.eth1.arp_filter = 1 net.ipv4.conf.eth1.arp_ignore = 1 net.ipv4.conf.all.arp_filter = 1 eth0 and eth1 are on the same VLAN/broadcast domain, but eth1 is a 169.xx and eth0 is a routable public IP. We're having to shut eth1 down and bring it up for sync at night. Thanks, Ga...

...net.c | 9 +++++++++ 5 files changed, 18 insertions(+) =================================================================== --- a/Documentation/networking/ip-sysctl.txt +++ b/Documentation/networking/ip-sysctl.txt @@ -782,6 +782,12 @@ The max value from conf/{all,interface}/arp_ignore is used when ARP request is received on the {interface} +arp_notify - BOOLEAN + Define mode for notification of address and device changes. + 0 - (default): do nothing + 1 - Generate gratuitous arp replies when device is brought up + or hardware address changes. + arp_accept - BOOLEAN D...

...inet 10.0.0.120/24 brd 10.0.0.255 scope global eth1 Default routing table after boot ip r: 10.0.0.0/24 dev eth0 scope link 10.0.0.0/24 dev eth1 scope link metric 1 127.0.0.0/8 dev lo scope link default via 10.0.0.1 dev eth0 default via 10.0.0.1 dev eth1 metric 1 I enabled ip_forward and set arp_ignore to 1 for eth0 and eth1 to make sure the correct nic answers to arp requests. I tried to get the egress load balancing to work by replacing the above two default routes with: ip route add default mpath drr nexthop via 10.0.0.1 dev eth0 weight 1 onlink nexthop via 10.0.0.1 dev eth1 weight 1 onl...

...e: 192.168.5.220 00-50-fc-2b-eb-1b dynamic 192.168.5.221 00-50-fc-2b-eb-1b dynamic 192.168.5.222 00-50-fc-2b-eb-1b dynamic ^ that''s all eth0''s hw addr :| I''ve also tried all /proc/sys/net/ipv4/conf/all/arp_ignore settings (+flushing arp tables @ client of course), but none of them helped... I''m not even sure if those options have anything to do with what I''m trying to accomplish. Actually, when adding the hw addr manually (arp -s 192.168.5.221 00-02-44-60-EC-58) pinging doesn''t...

Hi, I was reading document http://shorewall.net/MultiISP.html#idp3634200. Inspired by the document I was trying to establish the following changes: * one additional interface: COMA_IF * COM[A,B,C]_IF interfaces request IP address via DHCP * all non-RFC 1918 destined trafic is NATed from INT_IF to COMA_IF * all non-RFC 1918 destined trafic from GW is routed via COMB_IF by default * non-RFC 1918

...onfigs for network adapters: http://en.community.dell.com/techcenter/extras/m/white_papers/20442422 iSCSI vlan is 100 so that the configured devices are p1p1.100 and p1p2.100 and my sysctl config is: net.ipv4.conf.p1p1/100.arp_announce=2 net.ipv4.conf.p1p2/100.arp_announce=2 net.ipv4.conf.p1p1/100.arp_ignore=1 net.ipv4.conf.p1p2/100.arp_ignore=1 # net.ipv4.conf.p1p1/100.rp_filter=2 net.ipv4.conf.p1p2/100.rp_filter=2 So far so good and my lun is viewed this way through multipath [root at ov300 etc]# multipath -l 364817197b5dfd0e5538d959702249b1c dm-3 EQLOGIC ,100E-00 size=1.0T features='0' hwh...

...e ending up as martians. I have tried various combination''s in the interface file but nothing helps. Here is what I have it at at the moment: ipsec ipsec+ detect pptp ppp+ detect admin eth4 detect proxyarp,arp_filter chart eth3 detect norfc1918,routefilter,arp_ignore,nosmurfs tds eth2 detect norfc1918,routefilter,arp_ignore,nosmurfs voip eth1 detect proxyarp,routeback local eth0 detect proxyarp,routeback Here is the rest of the ip information: 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN link/loopba...

...I think that there is something that the bridges are filtering and perhaps is because the TS load balancing software uses various "virtual macs" for the load balancing IP. Perhaps I must change any /proc/sys/net/ipv4/conf/<dev>/ file to bypass this filter, I'm thinking in "arp_ignore", put a "1" into it, but is a production environment and I don't want to loss the access to the devices. Any help?

Hi all, I've been seeing this message fill my logs; pbond0: received packet with own address as source address I've tried; ip set link pbond0 down ip set link pbond0 arp off ip set link pbond0 up in /etc/systcl net.ipv4.conf.bond0.arp_ignore = 8 net.ipv4.conf.bond0.arp_announce = 2 I've 2 physycal nics bonded in mode0 called bond0. Are these messages benign and to be ignored? - aurf

Ok ive been trying to get this to work for about half a year now. Ive searched all over the internet for a solution for my problem. Ive found some solutions, but they only led me to yet more problems. What we want to do is the following: I live in a student complex with 7 other people. Every room has its own internet connection from the same ISP. Ip, gateway, subnet are asigned through dhcp on

Good day, I have gone through a couple of the HOWTO''s on how to get this to work, but I am still sitting with a very strange (for me) issue. If two clients connect via OpenVPN (bridged), they can access each other without any problems, but neither of them can access the server, nor any system behind it. I am fairly sure it is a Shorewall issue, but I am very new to Shorewall, having

Hi! Maybe, I found a bug of xen. My system: - domain0 - gentoo - xen-devel-3.0, kernel 2.6.12.5-r1 - domain1 - debian - kernel 2.6.12.5-r1 (2 interface: vif1.1 = eth0 (0.0.0.0), vif1.2 = eth1 (10.0.1.1 + gw 10.0.1.2)) Bridge: xen-br0 (config as 10.0.1.2) include (vif1.2, vif0.0) xen-br1 (config as 0.0.0.0) include (vif1.1, peth0) On server domain1 I use a pppoe server. If a send a pppoe request

Hi, I''m running Slackware 13.37 x86 using Shorewall 4.4.21 with OpenVPN and the VPN options I''m using in Slackware 13.37 will not work in Shorewall, but in Slackware 13.1 using the same Shorewall version and files, the ''interfaces'', ''policy'' and ''zone'', are all I have configured, it was working and this also works in Arch at