Configure Response Mode of ARP Requests for All IPv4 Interfaces
An XCCDF Rule
Description
To set the runtime status of the net.ipv4.conf.all.arp_ignore kernel parameter, run the following command:
$ sudo sysctl -w net.ipv4.conf.all.arp_ignore=To make sure that the setting is persistent, add the following line to a file in the directory
/etc/sysctl.d: net.ipv4.conf.all.arp_ignore =
warning alert: Functionality Warning
The ARP response mode may impact behaviour of workloads and firewalls on the system.
Rationale
Avoids ARP Flux on system that have more than one interface on the same subnet.
- ID
- xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_all_arp_ignore
- Severity
- Medium
- References
- Updated