duplicate address

[natss]

Hi,

I have a cluster Nokia IP380 (ipso 4.1-BUILD016 releng 1515 with NGX R61). For the moment, a firewall is missing (it will be added later). So in the dashboard, a cluster exists but with only one firewall (it's for the VRRP address facility)

On the interface eth1 which is subdivided in 4 logicals interfaces, the firewall is taking an address from the network i.e eth1c1 with address 192.168.25.70/26 for example and with VRRP address 192.168.25.68 can be see with address 192.168.25.73 (this address is used by an other device)

the arp -a command shows this status :

arp -a
? (192.168.25.73) at <the mac address of the good device>
? (192.168.25.73) at <the vrrp mac address from my cluster> permanent published (proxy only)

If i change the ip address of the eth1c1 interface with voyager then the arp command doesn't displays no more the ip spoofing --> get only the result :

arp -a
? (192.168.25.73) at <the mac address of the good device>

But if in dashboard i get interface with topology to rediscover the fw topology with the new ip address and if i push the policies then the problem is back.

Any idea ?

Regards.

Stan

PS: sorry for my english (i'm french --> nobody is perfect :-) )

[natss]

Hi,

two objects were NATed (hide behind address 192.168.25.73) but not used.

I remove NAT from this objects and push policy --> problem goes on.

Regards.

Stan