CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 Platforms > Sun Solaris
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2008-01-19
Junior Member
 
Join Date: 2007-10-05
Posts: 2
Rep Power: 0
andrewbo has an average reputation (10+)
Default Proxy-Arp problems on Solaris

Hi

My experience with FW1 R62 on Solaris 10 has been about 5 months. One problem I always seem to encounter is the one of proxy-arps. I have had no training so my problem might be one of experience. Please help me!

We have to make an internal server available to a external party. We are automatically natting it but arp -a does not show the address being publicized.
I have tried adding a arp -s <externalip> <macaddress> P and it gets entered but not publicized. Any ideas I can try?

I have been told that this is a problem for Solaris but that I have problems believing. Any comments on this would be welcome

Thanks
Reply With Quote
  #2 (permalink)  
Old 2008-01-21
Senior Member
 
Join Date: 2006-11-23
Posts: 159
Rep Power: 3
antonyso88 has an average reputation (10+)
Default Re: Proxy-Arp problems on Solaris

You are using Auto NAT. did you check the "automatic ARP configuration"?
Reply With Quote
  #3 (permalink)  
Old 2008-01-22
Junior Member
 
Join Date: 2007-10-05
Posts: 2
Rep Power: 0
andrewbo has an average reputation (10+)
Default Re: Proxy-Arp problems on Solaris

Hi

Yes, "automatic arp configuration" is checked.

Out of desperation I changed the external ip address that is available and it now shows a publicised entry when I do a "fw ctl arp".

It also shows as publicised when doin a "arp -a". Is this problem or normal behaviour?

I have entered a static route for the device as well. Would this confuse the issue?
Reply With Quote
  #4 (permalink)  
Old 2008-01-22
Senior Member
 
Join Date: 2006-11-23
Posts: 159
Rep Power: 3
antonyso88 has an average reputation (10+)
Default Re: Proxy-Arp problems on Solaris

If you have checked "Translate Dest. on client side", you don't need to add static route.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 17:37.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0