The IP address associated with an interface that is administratively up but physically down is reachable through other interfaces from external sources.
- Cumulus Linux 1.5.x and higher
In contrast to the strong host model used by some other routing devices, Linux uses the weak host model and considers the IP address as a property of the device rather than the interface it is defined on. This was historically due to preferring that if the device was reachable via any interface, the connection should be allowed. Note that this is expected Linux behavior is not unique to Cumulus Linux.
While this behavior may seem unusual to a network administrator, it is not unexpected and should not create problems for normal operation.
If an interface is manually set down, you won't see the above behavior. To remove the local interface address from operation, set the link down using one of the following commands:
sudo ip link set swpXX down sudo ifdown swpXX
(where XX is the number of the swp interface)