Enable arptables

[Iwakan]

It's possible to enable arptables command in Merlin? What I want to do is to block arp traffic from router to a specific network device and add this device manually to router's arp table. Maybe there is a better way to achieve this but I don't know how... any idea?

 

[SnakeByte]

Hmm.. You can use the arp -s command to manually add the entry.

This command should disable arp for a specific interface:
ip link set dev eth0 arp off

Otherwise, I would imagine iptables can do what you need?
Something like:
iptables -I INPUT -p ARP -o eth0 -j DROP

As long as your device is connected directly to the interface, that should do what you need.

I am curious as to why you want to do this? Maybe using a VLAN is a better choice?

 

[sfx2000]

I am curious as to why you want to do this? Maybe using a VLAN is a better choice?

Thanks for asking - I was considering the same thing - why directly manipulate ARP tables - as they're fair dynamic based on the real world network config...

 

[Iwakan]

I'm trying to do this because my router is waking up my nas every hour. This problem is present in recent Asus firmwares (stock and Merlin) and seems that is due an arp broadcast sent to update new network map functionality. What I want to do is to fix this disabling all arp packets towards nas and add a static entry in router's arp table. I can confirm that "ip link set dev eth0 arp off" command is not working because my nas stills waking up every hour. Now I'm going to try with your iptables suggestion but as far as I know iptables works only for layer 3 traffic and arp is layer 2 isn't it?

P.S. Only to confirm. To apply a configuration after type a command, I have to do something else? For example after introducing ip link set command and press enter without errors I assume that command is working.