topic proxy arp on a VMware Virtual Gateway in General Topics

proxy arp on a VMware Virtual Gateway

AkosBakos — Thu, 31 Oct 2024 12:04:54 GMT

Hi Team,

I have an interesting question:

What should I do to make he proxy arp feature functional on a VM?

I did the necessary steps on GAI portal, but tha ARP is still incomplete.

This is a test environment, so I can do almost anything.

Verion: R81.20 take 84

Please help 🙂

Akos

Re: proxy arp on a VMware Virtual Gateway

the_rock — Thu, 31 Oct 2024 12:21:16 GMT

Hey bro,

Are you saying when you add it via web UI and run arp from expert does not show up? I can test it later in the lab and see what I get.

Andy

Re: proxy arp on a VMware Virtual Gateway

AkosBakos — Thu, 31 Oct 2024 12:35:51 GMT

Hi Andy,

Yes everything on GAIA portal.

To be honest, I never did this setting in virtual gw only hw appliance

akos

Re: proxy arp on a VMware Virtual Gateway

the_rock — Thu, 31 Oct 2024 12:37:41 GMT

No worries ! Just working on something now, but will test it later. I dont sadly have lab physical appliance to test it, so can only do it on vm for now. Once I try, will let you know.

Best,

Andy

Re: proxy arp on a VMware Virtual Gateway

Chris_Atkinson — Thu, 31 Oct 2024 12:39:00 GMT

Do you already have the setting per sk101214?

Re: proxy arp on a VMware Virtual Gateway

the_rock — Thu, 31 Oct 2024 13:03:57 GMT

Let me see if I can make this show up in cli. I added up bogus entry in web UI, enabled merge auto proxy arp from global properties, pushed policy, but entry is not there. I work often with client who has 16K appliances and they have bunch of arp entries and they all show up, so I will review sk Chris mentioned.

Andy

Re: proxy arp on a VMware Virtual Gateway

the_rock — Thu, 31 Oct 2024 13:27:45 GMT

Maybe I tested it way too fast the 1st time, but I ended up rebooting the lab gw and now it shows up, though Im sure it was showing up before too, I just did not wait till policy was done.

Andy

[Expert@R82:0]# fw ctl arp
dynamic-005-005-005-005.5.5.pool.telefonica.de (5.5.5.5) at 50-01-00-0c-00-00 interface 172.16.10.254
[Expert@R82:0]#

MAKE SURE that option in global properties is enabled for merge manual arp config.

https://support.checkpoint.com/results/sk/sk30197

Merge manual proxy ARP configuration merges the Automatic and Manual ARP configurations. Manual proxy ARP configuration is required for manual Static NAT rules. If a manual ARP configuration is defined in the $FWDIR/conf/local.arp file, and "Automatic ARP configuration" is enabled, both definitions are maintained. If there is a conflict between the definitions (the same NATed IP address appears in both), then the manual configuration is used.

[Expert@R82:0]# more /opt/CPsuite-R82/fw1/conf/local.arp
# This file was AUTOMATICALLY GENERATED
# DO NOT EDIT
# Please use Gaia Portal or clish command to configure ARP proxy
5.5.5.5 50:01:00:0c:00:00 172.16.10.254
[Expert@R82:0]#

Re: proxy arp on a VMware Virtual Gateway

AkosBakos — Thu, 31 Oct 2024 16:20:02 GMT

Hi Andy,

I will test it, and get back to you.

It is much more easier on appliances. 😉

akos

Re: proxy arp on a VMware Virtual Gateway

the_rock — Thu, 31 Oct 2024 16:51:56 GMT

I hear ya : - )

Anyway, hope that works.

Andy