disable kern-ip forward, auto-bridge comment-out stp, fd