筆者在rhel6.3中執行sysctl -p的時候發現輸出出現以下錯誤
# sysctl -p
net.ipv4.ip_forward = 0
net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.default.accept_source_route = 0
kernel.sysrq = 0
kernel.core_uses_pid = 1
net.ipv4.tcp_syncookies = 1
error: "net.bridge.bridge-nf-call-ip6tables" is an unknown key
error: "net.bridge.bridge-nf-call-iptables" is an unknown key
error: "net.bridge.bridge-nf-call-arptables" is an unknown key
kernel.msgmnb = 65536
kernel.msgmax = 65536
kernel.shmmax = 68719476736
kernel.shmall = 4294967296
加載子產品測試,發現問題解決
# modprobe bridge
net.bridge.bridge-nf-call-ip6tables = 0
net.bridge.bridge-nf-call-iptables = 0
net.bridge.bridge-nf-call-arptables = 0
以下大緻的意思主要說使用以上3個選項阻止橋接流量獲得通過主機iptables規則,netfilter是預設情況下啟用了橋梁,如果不阻止會導緻嚴重的混亂
轉載位址: http://blog.csdn.net/kumu_linux/article/details/8591819