Comments on: ARP table overflow in Checkpoint and Linux in general

By: Erik

Erik — Fri, 07 Oct 2011 14:01:54 +0000

On all of our SPLATs there is a line “net.ipv4.ip_forward = 0″ which disables routing. So sysctl -p caused some trouble. Maybe it’s default in newer versions of SPLAT. I guess routing is reenabled after the load of the fw policy.
The best solution for me was adding the 3 lines to /etc/sysctl.conf for when the reboot comes and setting the values temporary via
#echo 1024 > /proc/sys/net/ipv4/neigh/default/gc_thresh1
#echo 4096 > /proc/sys/net/ipv4/neigh/default/gc_thresh2
#echo 16384 > /proc/sys/net/ipv4/neigh/default/gc_thresh3
So routing is all ok.

By: Yuri

Yuri — Tue, 29 Jun 2010 18:42:34 +0000

Thanks Darrin ,
fixed,

By: Darrin

Darrin — Tue, 29 Jun 2010 00:17:50 +0000

I think your temporary commnads should be:
#echo 1024 > /proc/sys/net/ipv4/neigh/default/gc_thresh1
#echo 4096 > /proc/sys/net/ipv4/neigh/default/gc_thresh2
#echo 16384 > /proc/sys/net/ipv4/neigh/default/gc_thresh3

By: Yuri

Yuri — Fri, 29 Jan 2010 06:18:56 +0000

Yeah, I wrote it after got additional cases of this so instead of explaining each time i give link and wish them good luck.

Cheers.
Yuri

By: David

David — Fri, 29 Jan 2010 00:10:58 +0000

Nice Post, Though sounds familiar..:)