linux配置ARP内核参数,详细讲解linux内核参数arp_announce和arp_ignore

linux内核/proc/sys/net/ipv4/conf中下面会有各网卡的配置参数其中arp_ignore和arp_annouce与arp相关

arp_ignore　取值为integer

0 (default) :reply for any local target IP address configured on any interface

1 : reply only if the target IP address is local address configured on the incoming interface

2 : reply only if the target IP address is local address configured on the incoming interface and both with the sender‘s IP address are part from the same subnet on this interface

3 : do not reply for local address configured with scope host,only resolutions for global and link addresses are replied

4-7 : reserved

8 : do not reply for all local addresses

arp_ignore=0:此为默认值,遇到任何网卡,任何IP地址,内核都会相应arp请求

arp_ignore=1:只有IP地址配置在接收到arp请求的网卡上时,内核才会做出arp回应

arp_ignore=2:比arp_ignore多了一层限制,就是不仅要同网卡,还必须同网段

arp_ignore=3:scope为host的全部拒绝,只回应IP地址scope为global和link的

arp_ignore=8:属于自