some interfaces started acting as proxy arp

[Arskazv]

Hi!

Has anyone seen following:
Gaia gw has about 150 VLAN interfaces.

Now 2 VLAN interfaces has started to function as proxy arp and they respond to every arp request. Causes duplicate address errors on hosts in those VLANs. Same in both cluster members.

/proc/sys/net/ipv4/conf/<interface>/proxy_arp files all show 0

fw ctl arp shows a lot of entries, local.arp -file has no entries

Any ideas?

[Martijn]

Hi,

Do you have more information for us? Version, hotfix, VSX or non-VSX.

Did you configure NAT on objects and enabled Automatic Proxy ARP in the Global Properties?
Maybe the wrong NAT address is configured causing the gateway to Proxy ARP for those addresses.

Martijn

[Bob_Zimmerman]

Automatic static NAT on a network or address range object can result in a LOT of proxy ARP entries for what seems like a very small amount of config.

[simonemantovani]

With fw ctl arp you should see only the proxy arp configured on your firewall; you should also check in CLISH with the command show configuration proxy arp if there are any proxy arp configuration.

And as suggested by @Martijn check the automatic nat configuration.

[Arskazv · Accepted solution]

Actually found a configuration mistake, where large network was accidentally configured with automatic Static NAT instead of hide nat...and naturally large range of public addresses(partially overlapped these two networks) were taken to this. Fixed it to hide NAT.