With multiple interfaces in a bridge - should proxy-arp be enabled for each interface, or the bridge, or both?
Nope normally you do not enable this, but how does your whole network look like ? You have S2S VPN’s attached ? Incoming VPN-clients ? Other lines attached to the Mikrotik ?
Or just a classic “LAN” with some bridges & VLAN’s ?
As per wiki, it is a technique by which a proxy device on a given network answers the ARP queries for an IP address that is not on that network. The proxy is aware of the location of the traffic’s destination, and offers its own MAC address as the (ostensibly final) destination.
The traffic directed to the proxy address is then typically routed by the proxy to the intended destination via another interface or via a tunnel.
Yes - multiple network connections. My primary router has both IPSEC and SSTP remote networks connected to it. The local connections are in a bridge for the LAN. I also have a remote site, connected to my main router via SSTP, which has devices connected in a bridge. I want to expose the remote addresses to my local networks.
So what’s the answer to the OPs question?