cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post

Proxy ARP on GAIA

Jump to solution

Hi community, I've tried to google the topic but didn't find the answer.

The question is why it is required to add the entries to the Proxy ARP on GAIA to make the NAT work? Is there a possibility to enable dynamic arp so that no configuration is required to make an public IP reachable?

Thanks, Harpreet S.

0 Kudos
1 Solution

Accepted Solutions
Admin
Admin

Re: Proxy ARP on GAIA

Jump to solution
If you use Automatic NAT rules, the Proxy ARPs will be created for you.
Manual NAT rules still require proxy ARPs to be created.
In R80.x, automatic ARPs for Manual Source NAT rules can be created but this is not enabled by default.
See: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...
5 Replies
Admin
Admin

Re: Proxy ARP on GAIA

Jump to solution
If you use Automatic NAT rules, the Proxy ARPs will be created for you.
Manual NAT rules still require proxy ARPs to be created.
In R80.x, automatic ARPs for Manual Source NAT rules can be created but this is not enabled by default.
See: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

Re: Proxy ARP on GAIA

Jump to solution

Thank you. sk114395 answer's what I was after.

Why the feature is not enable by default? For more security?

0 Kudos
Admin
Admin

Re: Proxy ARP on GAIA

Jump to solution

It's a change from the default behavior which people are accustomed to, thus why it is not the default.

0 Kudos
Wolfgang
Silver

Re: Proxy ARP on GAIA

Jump to solution

Harpreet,

ther's another way to add a proxy arp entry to a gateway without configuring via the GAiA portal.

Add a host object with your external IP to your rulebase and configure automatic NAT (static). As NAT-IP use the same external IP, add the relevant gateway and do a policy install. With this host object the gateway adds an proxy arp entry to the the gateway.

proxy_arp1.PNGproxy_arp2.PNG

 

 

 

 

 

 

Wolfgang

Re: Proxy ARP on GAIA

Jump to solution

We create the specific NAT rules but trying to configure the object will be interesting. Thank you Wolfgang!

0 Kudos