alternative for arp proxy

[calvinie2005]

Hi,

I have 2 firewall; one active, one standby.

I got a loop from some where, I need to shutdown proxyarp for that interface.

but later, I can't ping to the server from inside. ( I have done a nat translte for the server )

Q1: why xlate need proxy to work ?

q2 : any other way to solve ?

Thanks

trace ping test

[zubairjalal]

Proxy arp is needed when you are natting because the Natted IP is not physically given to some interface, the arp requests coming from the users will have to be answered by the firewall becuase the natted ip is configured on it.

Basically, when the clients send an ARP request for the Natted IP, the firewall says that "OK, I have this IP---So i will reply on its behalf"

Proxy arp is essential especially if the Natted subnet does not belong to the firewall itself. i.e. the natted ip range is not given on any interface of the firewall.

--Pls rate all helpful posts--