Proxy-ARP without subnetting almost done

Proxy-ARP without subnetting almost done

Post by Nico Hoube » Sat, 17 Aug 2002 22:55:54



Hello everybody

I'm almost there just 1 more problem to solve:
Situation:

external network -> ISP gateway x.x.x.65/29
    |                            network x.x.x.64/29
    |                           Broadcast x.x.x.71/29
    |
    | eth0
--------------------------------
|ETH0 -> IP: x.x.x.66 / 29        |
|                                                |
|                                                |   ETH1 -> IP: x.x.x.70 /
29
| ETH2 -> ip: 192.168.1.1 / 24 | --------------------
----------------------------------                            |

|

-----------------

BOX (WWW):

eth0 -> IP: x.x.x.67 / 29

GW x.x.x.65

Using the following arp commands / route commands on the firewall i can ping
both way's:
    arp -v -i eth0 -Ds x.x.x.67 eth0 pub
    route add -net x.x.x.64 netmask 255.255.255.248 dev eth0
    route add -host x.x.x.67 dev eth1

Now I can ping from the firewall to www box and from www box to firewall !
At the firewall I can ping several different hosts on the internet
but at the www box I can't ping outside. The only machine I can ping is my
firewall...

(THERE ARE NO IPTABLE rules !!)

Does anybody know what i'm doing wrong !
I think it is a routing problem on the www box but I really don't know what
the default gateway is the same as on the firewall.

Nico Houben

 
 
 

Proxy-ARP without subnetting almost done

Post by Bernd Eckenfel » Sun, 18 Aug 2002 02:53:49



> | ETH2 -> ip: 192.168.1.1 / 24 | --------------------

I strongly recommend to not mix networks. Juist assign eth2 th address of
eth0 or eth1.

Quote:> Does anybody know what i'm doing wrong !
> I think it is a routing problem on the www box but I really don't know what
> the default gateway is the same as on the firewall.

You must eighter give the firewall as the default gateway, or add a proxy
arp to the internal interface for the isp routers address.

Greetings
Bernd

 
 
 

1. Linux subnet proxy arp daemon for 2.2 kernels

Does such a beast exist?  If so, where could I get one.

And if not, how could I translate the dev entry in userspace arpd into ethX.
I think I could hardwire arpd to do what I want.

The third option would be loading all 4000 entries individually, but I think
I'd suffer some ill effects from that.

- Teemu Pitkanen

2. Apache and Frontpage modules?

3. How to config arp proxy with a subnet ??

4. my argv[0] question

5. Subnetting and proxy arp

6. Performance Monitoring Recommendations?

7. Masq + 1 subnet on 2 physical nets (Proxy ARP?)

8. Linux box in NT network

9. linux router with proxy arp support for subnets ??

10. I'm Desperate: Proxy ARP and Bridging without the Bridge

11. mstppp, proxy arp,what am i doing wrong?

12. Proxy arp (how to add an arp entry)

13. Proxy ARP grief, just can't get box to respond to ARP request