Community discussions

MikroTik App
 
spire2z
Long time Member
Long time Member
Topic Author
Posts: 516
Joined: Mon Feb 14, 2005 2:48 am

proxy-arp

Fri May 06, 2005 3:04 am

Have been experimenting with proxy-arp in order to use some public addresses behind the NAT mikrotik setup. I have a public address assignment of 12 public ip's and one assigned to the Mikrotik router with another 2 interfaces with private addresses in 255.255.255.0 subnet. I tried enabling the proxy-arp on the local interface I was connected to and setup my client pc to the public address using the subnet and gateway of the router and was getting ip confilicts on my client pc authogh I know the address is not in use? I have tried enabling proxy-arp on both and either interface and no combination works. is there a further configuration I have missed as it gives little details in the docs and I can't find anything solid in the forums either. I have used proxy-arp before under Linux and had it working fine but then I would enter the server address including the public and local interface and configure the client with the ip specified and gateway of backhaul isp using the subnet mask of the local interface? Can anybody help me to do this with Mikrotik as it don't work simply enabling proxy-arp?
 
IntraLink
Member Candidate
Member Candidate
Posts: 113
Joined: Fri May 28, 2004 5:44 pm
Location: Utah Valley
Contact:

Sun May 08, 2005 4:56 am

I think whatever interface you enable proxy-arp on is going to reply to ARPs for all IP's on all subnets assigned to that interface.

Maybe that is your problem?

I guess you should isolate one interface only facing your providor and assign it one of the public IP's only and enable proxy-arp. That way it will only respond as ALL of those IP's in the same subnet to arp requests it sees.
 
spire2z
Long time Member
Long time Member
Topic Author
Posts: 516
Joined: Mon Feb 14, 2005 2:48 am

Sun May 08, 2005 1:30 pm

Thanks for the info. I think I tried that but I will give it another go anyway.
 
spire2z
Long time Member
Long time Member
Topic Author
Posts: 516
Joined: Mon Feb 14, 2005 2:48 am

Wed May 11, 2005 9:18 pm

No can't get it to work :(
 
IntraLink
Member Candidate
Member Candidate
Posts: 113
Joined: Fri May 28, 2004 5:44 pm
Location: Utah Valley
Contact:

Sun May 15, 2005 4:57 pm

I believe you need to assign the SAME IP to both the external and internal interface and then enable proxy-arp on the outside interface. If you are not bridged layer two internally then you probably need to proxy-arp the internal interface as well.

Let us know if that works for you, or what is happening.
Any way you can add a hub to the network in front or behind and plug in a computer running ethereal to see the ARP packets etc?
 
User avatar
maximan
Trainer
Trainer
Posts: 543
Joined: Sat May 29, 2004 12:10 am
Location: Rio Cuarto, Argentina
Contact:

Mon May 16, 2005 5:09 pm

Please read this

http://leaf.sourceforge.net/doc/howto/proxyarp.html

It is an example of proxy arp with documentation.
Maxi
 
GJS
Member
Member
Posts: 418
Joined: Sat May 29, 2004 4:07 pm
Location: London

Mon May 16, 2005 8:15 pm

The bit that is left out of the manual is that the interface with proxy-ARP enabled will respond to requests, if the IP address exists in the routing table. You need a routing table entry to tell the interface that responded to the request what to do with the packet once it receives it. In this case, forward it to the local interface. If you want to use the public address of the MT as your gateway, you will also need ARP enabled on the local interface.

Check this topic:

http://forum.mikrotik.com//viewtopic.ph ... ight=#2010

Hope that helps.

Who is online

Users browsing this forum: Mosmos and 18 guests