Couln't save sysctl variables

[pmship]

Hello!

Unfortunately i don't know right category for my question... Sorry!

I have CheckPoint 600 Appliance with R77.20.20 firmware. There is a proble like https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut..., but "To view this solution, Advanced access is required"... Pity.

I consider that this ploblem seemsed like ARP Flux, so sulution can be "sysctl -w net.ipv4.conf.all.arp_ignore=2", byt this work only before reboot... For a standard linux you should write this config to /etc/sysctl.conf for permanently save. But CheckPoint is not a standard linux, and have no /etc/sysctl.conf (if i've create it, checkpoint dont read that). 

Whot shoul i do to save "net.ipv4.conf.all.arp_ignore=2" config permanently???

[_Val_]

SecureKnowledge article you want to access is irrelevant for SMB appliances. 

Before going any further, what is the issue with ARPs that you are facing?

[pmship]

Somtimes (not everytime) when host A from the same network as firewall want to know communicate with host B, he is sending ARP request in order to get the MAC address of host B, host B terned off that time, but firewall ansvers, that have this mac in his LAN. It won't be a problem if not IEEE 802.1X, but we have this technology, and switch considers that host B mac is on firewals port of switch, not on host B real port of switch.
We want to forbid firewall answers for ARP requests.

[G_W_Albrecht]

Did you consult sk114531: Configuring Proxy ARP for Manual Static NAT on SMB appliances already ?

[pmship]

unfortunately, we have no "Advanced access"

[G_W_Albrecht]

Then contact TAC for help - you do have valid support ?

[G_W_Albrecht · Accepted solution]

sk52520: How to run commands at boot on an SG80/600/700/1100/1400/1200R -- UserScript

sk111818: How to make kernel parameters survive reboot on SMB appliances

[pmship]

Ok, i successfully have resolved my problem by ```echo "sysctl -w net.ipv4.conf.all.arp_ignore=2" >> /pfrm2.0/etc/userScript```

[_Val_]

good to know!