Unable to Assign IP Address to the Server Hosted in DMZ

[Kevin_27C]

Hi Team,

             We are facing an strange issue here. We have a DMZ segement. When we assign the IP address to the Server to be hosted in the DMZ interface, we get IP conflict. When we Check the ARP , we find the MAC address of Cisco ASA. We tried it with 3 to 4 different IPs. Same result and same Mac Address. But we are 100% sure that the IP adderss we assign is not used elsewhere. Kindly help

[Jouni Forss]

Hi,

So I presume that you are talkinga bout the actual server giving error message about overlapping IP address?

Only thing related to ARP that I can think related to the ASA itself is that all of its interfaces are by default enabled with Proxy ARP. This means that the ASA might answer to an ARP request of an IP address even though it doesnt "own" it or have any configuration for it.

So that might be one thing to try. Provided ofcourse the DMZ network is directly configured on the ASA interface and the server is in that same network.

The command would be

sysopt noproxyarp DMZ

Provided that your actual interface name is "DMZ"

- Jouni