Configure the Host System to Deactivate IPv4 Proxy ARP

IPv4 Proxy ARP allows a system to send responses to ARP requests on one interface on behalf of hosts connected to another interface. You must deactivate IPv4 Proxy ARP to prevent unauthorized information sharing. Deactivate the setting to prevent leakage of addressing information between the attached network segments.

Procedure

1. Run the # grep [01] /proc/sys/net/ipv4/conf/*/proxy_arp|egrep "default|all" command to verify whether the Proxy ARP is deactivated.
2. Configure the host system to deactivate IPv4 Proxy ARP.
   1. Open the /etc/sysctl.conf file in a text editor.
   2. If the values are not set to 0, add the entries or update the existing entries accordingly. Set the value to 0.

      net.ipv4.conf.all.proxy_arp=0 
      net.ipv4.conf.default.proxy_arp=0 
      

   3. Save any changes you made and close the file.
   4. Run # sysctl -p to apply the configuration.