Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

PROXYARP

Is proxy ARP on by default on PIX firewalls? I've got a PIX 525. Is there a way I can tell if it is or not?

2 REPLIES
Hall of Fame Super Blue

Re: PROXYARP

I believe it is on by default. Looking at my firewalls (6.3 versions) it looks to be on.

Excerpt from Cisco doc:--

Check to see if proxy ARP is disabled. Issue the command show running-config sysopt in PIX/ASA 7.x or show sysopt in PIX 6.x.

Here proxy ARP is disabled by the command sysopt noproxyarp outside:

ciscoasa#show running-config sysopt

no sysopt connection timewait

sysopt connection tcpmss 1380

sysopt connection tcpmss minimum 0

no sysopt nodnsalias inbound

no sysopt nodnsalias outbound

no sysopt radius ignore-secret

sysopt noproxyarp outside

sysopt connection permit-vpn

In order to re-enable proxy ARP, enter this command in global configuration mode:

ciscoasa(config)#no sysopt noproxyarp outside

When i checked my firewalls there was no

sysopt noproxyarp "interface" statements so i'm assuming this means it is on by default.

HTH

Community Member

Re: PROXYARP

sh run, if you see "sysopt noproxyarp inside"

proxy arp is disabled. if you don't see it, it is enabled. Default is enabled.

Tim

533
Views
0
Helpful
2
Replies
CreatePlease to create content