Hello to all..

Working with reply-only on the internal ether, and enable arp in interfaces public's
the problem is that they are appearing in the arp table, public ip I do not know
between three and nine thousand entries

any ideas?
may have something to do the balancing pcc?
v 4.10





Thanks
Silvio
Buenos aires / Argentina


espanish:

Trabajo con reply-only en la ether interna, es decir habilito las mac que yo quiero q navegen en la tabla de arp.
el tema es que me estan apareciendo en la tabla de arp, asociada a la mac de la ether publica una pila de IP publicas (entre 3000 a 8000 entradas) y nose a que se debe, las cuales no deberian aparecer. puede ser virus de algun usuario? tengo la regla de attack de Dos y no es eso.alguna idea..?
Puede tener que ver algo el balanceo pcc ?

Can you post your interface configuration and routing configuration?

yep. sounds like you're using "/ip route add gateway=ether1_tasa", and your ISP uses proxy-arp

/ip route> print
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY-STATE GATEWAY DISTANCE INTERFACE
0 S ;;; salida default por SILICA
0.0.0.0/0 reachable 200.59.206.193 2 ether2_silica
1 A S ;;; salida default por TASA
0.0.0.0/0 reachable 201.251.112.97 1 ether1_tasa
reachable ether1_tasa ether1_tasa
2 A S ;;; salida de routing mark por TASA
0.0.0.0/0 reachable 201.251.112.97 1 ether1_tasa
reachable ether1_tasa ether1_tasa
3 A S ;;; salida de routing mark por Silica
0.0.0.0/0 reachable 200.59.206.193 1 ether2_silica
4 ADC 10.10.0.0/16 10.10.0.1 0 ether5_50
5 ADC 10.30.0.0/16 10.30.0.1 0 ether4_30
6 ADC 10.50.0.0/16 10.50.0.1 0 ether3_10
7 ADC 200.59.206.192/26 200.59.206.246 0 ether2_silica
8 ADC 201.251.112.96/27 201.251.112.108 0 ether1_tasa


I think found the problem
gateway interface, had placed ether1_tasa, and I have to leave it empty

thanks

exactly =)