Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

alternative for arp proxy

Hi,

I have 2 firewall; one active, one standby.

I got a loop from some where, I need to shutdown proxyarp for that interface.

but later, I can't ping to the server from inside. ( I have done a nat translte for the server )

Q1: why xlate need proxy to work ?

q2 : any other way to solve ?

Thanks

trace ping test

1 REPLY
Bronze

Re: alternative for arp proxy

Proxy arp is needed when you are natting because the Natted IP is not physically given to some interface, the arp requests coming from the users will have to be answered by the firewall becuase the natted ip is configured on it.

Basically, when the clients send an ARP request for the Natted IP, the firewall says that "OK, I have this IP---So i will reply on its behalf"

Proxy arp is essential especially if the Natted subnet does not belong to the firewall itself. i.e. the natted ip range is not given on any interface of the firewall.

--Pls rate all helpful posts--

167
Views
4
Helpful
1
Replies