Re: how to add proxy-arp entires for manual nat hi mate in my scenario the internal host resides in the same subnet as the internal interface of the firewall and the outside host who is trying to access it resides on the same subnet of the external interface. my internal interface of firewall is 10.1.1.100 and internal host is 10.1.1.254 my external interface of firewall is 1.1.1.1 and outside host is 1.1.1.2. static nat address of inside host is 60.1.1.1 on the outside host my default gateway is the external interface of the firewall.so when the outside host does a AND operation it finds out the destination is in a different subnet so naturally it will send it to it;s default gateway which is the external interface of the firewall. so why do we need a static proxy arp entry in the first place i am just not getting the point of configuring it. can u pls tell why. waiting for ur reply. regards sebastan |