 Re: IP POOL NAT Question
Why is the internal host sending an ARP request? Why not define your IP Pool as a network that doesn't physically exist anywhere on the network, then set up the network to route to the firewall to get to that network. That way the internal hosts will simply route their traffic to the firewall, it will intercept the traffic, and de-NAT it/encrypt it to send it back to the client.
Is the firewall configured to do proxy ARP otherwise? If it's not, why would it respond to an ARP request for an IP it's not configured to ARP for? |