Below are steps for disabling reverse path settings (rp_filter) for network bonds/interfaces on Linux Hosts.
1. Take backup of /etc/sysctl.conf file.
2. Modify /etc/sysctl.conf file and add below line in it. In below line update <bond or interface> with bond or interface name.
For e.g. if you want to disable reverse path settings for bond0, line looks as follows:
3. Reboot the Linux host after changes for updated reverse path settings to take into affect. If reboot cannot be done run below sysctl command to load the updated reverse path settings.
1. Take backup of /etc/sysctl.conf file.
2. Modify /etc/sysctl.conf file and add below line in it. In below line update <bond or interface> with bond or interface name.
net.ipv4.conf.<bond or interface>.rp_filter = 0
For e.g. if you want to disable reverse path settings for bond0, line looks as follows:
net.ipv4.conf.bond0.rp_filter = 0
3. Reboot the Linux host after changes for updated reverse path settings to take into affect. If reboot cannot be done run below sysctl command to load the updated reverse path settings.
sysctl -p
Products to which Article Applies
All Linux Operating SystemsAdditional Reference
https://www.theurbanpenguin.com/rp_filter-and-lpic-3-linux-security/
tarun boyella
No comments:
Post a Comment