diff --git a/package/harvester-os/files/etc/systemd/system/rke2-agent.service.d/override.conf b/package/harvester-os/files/etc/systemd/system/rke2-agent.service.d/override.conf
index a8317a5a3..cfa181f53 100644
--- a/package/harvester-os/files/etc/systemd/system/rke2-agent.service.d/override.conf
+++ b/package/harvester-os/files/etc/systemd/system/rke2-agent.service.d/override.conf
@@ -4,3 +4,4 @@ Wants=time-sync.target
 
 [Service]
 ExecStartPre=/usr/sbin/harv-update-rke2-server-url agent
+ExecStartPost=/sbin/sysctl -w net.bridge.bridge-nf-call-iptables=0
diff --git a/package/harvester-os/files/etc/systemd/system/rke2-server.service.d/override.conf b/package/harvester-os/files/etc/systemd/system/rke2-server.service.d/override.conf
index 124bb2bce..e774ff5e7 100644
--- a/package/harvester-os/files/etc/systemd/system/rke2-server.service.d/override.conf
+++ b/package/harvester-os/files/etc/systemd/system/rke2-server.service.d/override.conf
@@ -4,3 +4,4 @@ Wants=time-sync.target
 
 [Service]
 ExecStartPre=/usr/sbin/harv-update-rke2-server-url server
+ExecStartPost=/sbin/sysctl -w net.bridge.bridge-nf-call-iptables=0