Hi all
I have to route a subnet /29 of public addresses directly to my client. I enabled proxy-arp to wan interface of the frontier router that manages that client and as regards connections forwarded through this router all is ok. This frontier router manages public addresses of a/23 subnet with gateway attested to my isp. But so I have problems with a second frontier router with different public addresses on wan interface but belonging to the same public subnet /23 of the previous frontier router. This second frontier router has wan interface with arp enabled. Problem is proxy-arp on the wan interface of first router. Is there a way to limit to specific addresses proxy-arp of an interface? Thanks
You have probably hit an example of why proxy-arp is both useful and dangerous.
Is the /23 presented on the WAN interface rather than being routed to you via a small (say /30) link network?
If it is it might be time to talk to your ISP about a routed arrangement which gives you more control.
Celticcomms thanks for reply.
It’s right so. I just told with my isp about that solution but I have to change some configurations. Meantime I’m trying to understand if it’s possible a solution with this network structure. i.e. is proxy-arp configurable somehow? Or can you suggest another solution?
I don’t have enough information on your configuration to know exactly what is possible.
After time spent digging a hole we are sometimes faced with a couple of options:
a) to keep digging
b) to build foundations
I sense that it is time for b). ![]()
As I told you I will follow option b, but as quick solution I would like to know if a solution with actual configuration exists.
Guide lines of my network configuretion are like that:
Our isp gives us a /23 of public addresses with gw setted on isp server.
I have two frontier routers facing isp network, with same configuration, each managing different public addresses of /23 on wan interfaces and both pointing with a default route to the gw. Both routers on lan interfaces have pppoe server implemented, each managing a group of pppoe-client users. Pppoe clients are grouped and each hroup is natted to one specific public address. If pppoe client needs one public address, I use nat.
Now I need to assign a /29 of public addresses to a pppoe client. In native way, not nat. If I had only one frontier router, enabling proxy-arp on wan interface would be good. But with two routers on the same subnet (phisically the two wan interfaces on the same switch) there are problems. Router without proxy-arp on wan interface (arp enabled) doesn’t work. I’d like to know:
a) is proxy-arp configurable? Is it possible make it work only with specifiad ips? Can mikrotik do that?
b) said that having gw on my server is the best way, anyway does solution exist with actual network configuration?