Mikrotik Proxy-arp making network unusable

RouterOS General
1

Hello guys, let me try to explain my network situation first. I’m using RB2011UiAS-2HnD

on ether1 I’ve got internet connection(optical connection directly to ISP)
on ether2 I have LAN 192.168.1.0/24 (With DHCP server, It’s used only for lan PC’s,print servers,etc..)
on ether3 I have LAN 192.168.2.0/24 (Only used for Voip phones, not really related to this post)
on ether4 I have LAN 192.168.3.0/24 (Used only for DVR and 16 IP cameras connected to that dvr)
ether5,6,7,8,9,10,sfp,wlan interfaces 192.168.88.0/24 (Are bridged and have their dhcp server)

I have 1 PC with IP 192.168.88.200 and It needs to watch DVR all the time (dvr ip 192.168.3.201)

So, when I have ARP:Enabled on ether4, PC 192.168.88.200 cant see DVR. When I set ARP:arp-proxy, PC can access DVR and everthings fine, BUT, all IP’s on ether2 get some wierd clones (with same MAC address) on every address, I will post screenshots from IP scan so you can get what im talking about :confused: When I set arp-proxy on ether4 my LAN with pcs (192.168.1.0/24) gets some annoying double IP’s (with all same MAC address) and cant function properly.
proxy-arp.jpg
enabled.jpg

2

ARP-proxy allows interface to answer to all ARP requests that are not replayed in the network - this is necessary when you have someone VPN into your network using IP address from the same Local network. If you do not have such setup, proxy-arp is not for you.

maybe static ARP entry for your DVRs will help you.

3

I understand when is ARP-proxy supposed to use, but I just cant ping anything except router on interface (in this example 192.168.3.1) without proxy-arp.

4

bump, anyone ? :confused: This is ARP list I get, as you can see all ips from 1.1-1.254 with same mac when proxy-arp is enabled, and when arp is only enabled ether4 cant comunicate with wlan,or any other interface.
snip.JPG