topic Couln't save sysctl variables in Spark Firewall (SMB)

Couln't save sysctl variables

pmship — Mon, 17 Feb 2020 08:06:40 GMT

Hello!

Unfortunately i don't know right category for my question... Sorry!

I have CheckPoint 600 Appliance with R77.20.20 firmware. There is a proble like https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk106397, but "To view this solution, Advanced access is required"... Pity.

I consider that this ploblem seemsed like ARP Flux, so sulution can be "sysctl -w net.ipv4.conf.all.arp_ignore=2", byt this work only before reboot... For a standard linux you should write this config to /etc/sysctl.conf for permanently save. But CheckPoint is not a standard linux, and have no /etc/sysctl.conf (if i've create it, checkpoint dont read that).

Whot shoul i do to save "net.ipv4.conf.all.arp_ignore=2" config permanently???

Re: Couln't save sysctl variables

_Val_ — Mon, 17 Feb 2020 11:52:32 GMT

SecureKnowledge article you want to access is irrelevant for SMB appliances.

Before going any further, what is the issue with ARPs that you are facing?

Re: Couln't save sysctl variables

G_W_Albrecht — Mon, 17 Feb 2020 13:49:48 GMT

Did you consult sk114531: Configuring Proxy ARP for Manual Static NAT on SMB appliances already ?

Re: Couln't save sysctl variables

pmship — Tue, 18 Feb 2020 02:06:12 GMT

Somtimes (not everytime) when host A from the same network as firewall want to know communicate with host B, he is sending ARP request in order to get the MAC address of host B, host B terned off that time, but firewall ansvers, that have this mac in his LAN. It won't be a problem if not IEEE 802.1X, but we have this technology, and switch considers that host B mac is on firewals port of switch, not on host B real port of switch.
We want to forbid firewall answers for ARP requests.

Re: Couln't save sysctl variables

pmship — Tue, 18 Feb 2020 02:07:15 GMT

unfortunately, we have no "Advanced access"

Re: Couln't save sysctl variables

G_W_Albrecht — Wed, 19 Feb 2020 10:59:32 GMT

Then contact TAC for help - you do have valid support ?

Re: Couln't save sysctl variables

G_W_Albrecht — Wed, 19 Feb 2020 11:15:33 GMT

sk52520: How to run commands at boot on an SG80/600/700/1100/1400/1200R -- UserScript

sk111818: How to make kernel parameters survive reboot on SMB appliances

Re: Couln't save sysctl variables

pmship — Thu, 20 Feb 2020 07:58:57 GMT

Ok, i successfully have resolved my problem by ```echo "sysctl -w net.ipv4.conf.all.arp_ignore=2" >> /pfrm2.0/etc/userScript```

Re: Couln't save sysctl variables

_Val_ — Thu, 20 Feb 2020 08:09:15 GMT

good to know!