diff -u vlan-1.9/debian/changelog vlan-1.9/debian/changelog
--- vlan-1.9/debian/changelog
+++ vlan-1.9/debian/changelog
@@ -1,3 +1,10 @@
+vlan (1.9-3.2ubuntu2.17.04.3) zesty; urgency=medium
+
+  * Allow ip-rp-filter to be 0, 1, or 2 instead of only 0 or 1
+    (LP: #1716964)
+
+ -- Dan Streetman <dan.streetman@canonical.com>  Wed, 20 Sep 2017 09:30:21 -0400
+
 vlan (1.9-3.2ubuntu2.17.04.2) zesty; urgency=medium
 
   * Correct previous patch, to work for ifupdown configuration where a
diff -u vlan-1.9/debian/network/if-up.d/ip vlan-1.9/debian/network/if-up.d/ip
--- vlan-1.9/debian/network/if-up.d/ip
+++ vlan-1.9/debian/network/if-up.d/ip
@@ -13,6 +13,8 @@
 	if [ -n "$IF_IP_RP_FILTER" ]; then
 		if [ "$IF_IP_RP_FILTER" -eq "0" ]; then
 			echo 0 > "/proc/sys/net/ipv4/conf/$IFACE/rp_filter"
+		elif [ "$IF_IP_RP_FILTER" -eq "2" ]; then
+			echo 2 > "/proc/sys/net/ipv4/conf/$IFACE/rp_filter"
 		else
 			echo 1 > "/proc/sys/net/ipv4/conf/$IFACE/rp_filter"
 		fi