Hi Francis, > Is it possible at all to tell farp which subnets to ignore, or is it > hard coded to respond to everything? No, the farp plugin sends ARP responses only for IPs that match the remote traffic selector of an established CHILD_SA. Regards, Tobias