NAT with proxy ARP question


 
Thread Tools Search this Thread
Special Forums IP Networking NAT with proxy ARP question
# 1  
Old 03-17-2006
NAT with proxy ARP question

Hello Gurus!

I'm currently trying to configure NAT using proxy ARP on a SunOS 5.8 .
This box is running Check Point FW1 that sits behind my internet router.

I have a server that is connected to the firewall box. I want to translate this server using proxy ARP.

Settings:
==========================================================

A) FW box "Public" interface IP address: 10.1.1.1 (in actual situation uses real public IP).

B) FW box internal interface IP address: 172.16.1.1

c) Server interface IP address: 172.16.1.5

I want the server to be translated to the IP 10.1.1.5.

I have gone through these steps in order to set it up

Steps:
=========================================================
1) Set the FW interface to answer for ARP request for 10.1.1.5

arp -s 10.1.1.5 08:00:20:c4:4a:e6 pub

08:00:20:c4:4a:e6 is the FW ethernet address.


2) Add routing entries to send traffic to the right destination

route add -host 10.1.1.5 172.16.1.5

==========================================================

There are currently 2 other servers NATted this way on the firewall and they work just fine.

Firewall rules allow certain tcp connections and icmp to to 10.1.1.5 and 172.16.1.5


Am I missing anything? What should I do to make it work...
Been trying for the past 4 hours and its already past midnight

Thank you so much for any help!

Azzuwan,
Kuala Lumpur, Malaysia
# 2  
Old 03-17-2006
Problem solved!

I did not specify static NAT in the Check Point FW1 for the server network object.

Time to go home now Smilie
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. IP Networking

Connecting via proxy chain to Upstream proxy

I need to configure a proxy on my local machine to use an upstream proxy (installed on another machine). The upstream proxy requires Digest/NTLM authorization. I want the local proxy to deal with the upstream proxy's authorization details and provides authorization free access to users that connect... (0 Replies)
Discussion started by: Russel
0 Replies

2. War Stories

What arp -s is good for

A customer appears to have drastically misunderstood our instructions for connecting to our WAN. He set his PC IP address to the same as one of the bridges. :mad: :wall: This caused much confusion on the network, to put it mildly. He called to complain about the poor performance of the network... (13 Replies)
Discussion started by: Corona688
13 Replies

3. Red Hat

Arp Problem

Dear All i have a linux proxy server which has RHEL-5 64 bit, it has two interfaces, it has the following details eth0=10.200.14.42 eth3=10.201.14.42 default gateway=10.201.14.254 one static route=192.168.0.0/24 gw 10.200.14.254 i am facing a problem when i ping 10.201.14.42 from... (2 Replies)
Discussion started by: surfer24
2 Replies

4. IP Networking

Software/tool to route an IP packet to proxy server and capture the Proxy reply as an

Hi, I am involved in a project on Debian. One of my requirement is to route an IP packet in my application to a proxy server and receive the reply from the proxy server as an IP packet. My application handles data at the IP frame level. My application creates an IP packet(with all the necessary... (0 Replies)
Discussion started by: Rajesh_BK
0 Replies

5. HP-UX

HW Address and arp

I was checking nettl output for a unstable telnet to my server. this is part of output: ### ***********************************STREAMS/UX*******************************@#% Timestamp : Sun Jun 22 EETDST 2008 22:14:47.492899 Process ID : Subsystem ... (4 Replies)
Discussion started by: xramm
4 Replies

6. IP Networking

NAT question

i have a firewall with two interfaces eth0 and eth1, eth0 is connected to an external network, and eth0 is connected to a private lan. im using this command for NAT iptables -A POSTROUTING -t nat -s 192.168.0.0/24 -o eth0 -j SNAT --to-source 223.0.0.3 my questions are : 1) how can i... (4 Replies)
Discussion started by: ratamahatta
4 Replies

7. BSD

proxy or NAT

how do i configure proxy in freeBSD or NAT so that when i set it up as a server can connect other to my new gateway (0 Replies)
Discussion started by: AkinOkin
0 Replies

8. IP Networking

Proxy ARP Difficulties

edited ... (7 Replies)
Discussion started by: TheMaskedMan
7 Replies

9. UNIX for Dummies Questions & Answers

General Proxy Question

This is quite a general question: I am trying to detect whether people accessing my network are using a proxy server. This is *not* to ensure that web pages are not cached! The only way that I can think of doing this is to intercept at packet level and examine the source port for... (1 Reply)
Discussion started by: sam_pointer
1 Replies

10. IP Networking

General Proxy Question

Firstly I must apologise; I have posted something similar in the "general UNIX newbies" forum; but in reterospect I think that it's more appropriate here. Anyhoo; I am trying to detect whether people accessing one of my servers are coming via a proxied connection. I must add that this is... (1 Reply)
Discussion started by: sam_pointer
1 Replies
Login or Register to Ask a Question