Disable ARP response on one of IPs
Hi.
I have assigned 2 IP addresses to one network interface. For example: 192.168.1.100 and 10.2.2.1 Is it possible to disable ARP response on a particular IP address? I.e. respond only to request of 192.168.1.100, but not respond on 10.2.2.1. |
I have no experience on this but with google I found this, I hope it helps.
|
well, i know if you disable ARP, then each system on the network needs to have every other system's MAC address and corresponding IP entered into its ARP tables manually. If you are prepared to do this (which, if you have a small network, is quite doable), you can run
Code:
arp -s xx:xx:xx:xx:xx:xx 1.2.3.4 You could also use the "ip" utility to disable ARP on the interface (ifconfig would show NOARP for it), but the same kind of ARP commands would still need to be run. |
Thanks tva, it works. I had to enable Netfilter Xtables support in kernel and add a rule to drop all ARP requests, except the one destined to primary IP if an interface:
Code:
arptables -A INPUT ! -d 192.168.1.100 -j DROP |
All times are GMT -5. The time now is 08:33 PM. |