proxy arp on a VMware Virtual Gateway

[AkosBakos]

Hi Team,

I have an interesting question:

What should I do to make he proxy arp feature functional on a VM?

I did the necessary steps on GAI portal, but tha  ARP is still incomplete.

This is a test environment, so I can do almost anything.

Verion: R81.20 take 84

Please help 🙂

Akos

[the_rock]

Hey bro,

Are you saying when you add it via web UI and run arp from expert does not show up? I can test it later in the lab and see what I get.

Andy

[AkosBakos]

Hi Andy,

Yes everything on GAIA portal.

To be honest, I never did this setting in virtual gw only hw appliance

akos

[the_rock]

No worries ! Just working on something now, but will test it later. I dont sadly have lab physical appliance to test it, so can only do it on vm for now. Once I try, will let you know.

Best,

Andy

[Chris_Atkinson]

Do you already have the setting per sk101214?

[the_rock]

Let me see if I can make this show up in cli. I added up bogus entry in web UI, enabled merge auto proxy arp from global properties, pushed policy, but entry is not there. I work often with client who has 16K appliances and they have bunch of arp entries and they all show up, so I will review sk Chris mentioned.

Andy

[the_rock]

Maybe I tested it way too fast the 1st time, but I ended up rebooting the lab gw and now it shows up, though Im sure it was showing up before too, I just did not wait till policy was done.

Andy

[Expert@R82:0]# fw ctl arp
dynamic-005-005-005-005.5.5.pool.telefonica.de (5.5.5.5) at 50-01-00-0c-00-00 interface 172.16.10.254
[Expert@R82:0]#

 MAKE SURE that option in global properties is enabled for merge manual arp config.

https://support.checkpoint.com/results/sk/sk30197

• Merge manual proxy ARP configuration merges the Automatic and Manual ARP configurations. Manual proxy ARP configuration is required for manual Static NAT rules. If a manual ARP configuration is defined in the $FWDIR/conf/local.arp file, and "Automatic ARP configuration" is enabled, both definitions are maintained. If there is a conflict between the definitions (the same NATed IP address appears in both), then the manual configuration is used.

[Expert@R82:0]# more /opt/CPsuite-R82/fw1/conf/local.arp
# This file was AUTOMATICALLY GENERATED
# DO NOT EDIT
# Please use Gaia Portal or clish command to configure ARP proxy
5.5.5.5 50:01:00:0c:00:00 172.16.10.254
[Expert@R82:0]#

[AkosBakos]

Hi Andy, 

I will test it, and get back to you.

It is much more easier on appliances. 😉

akos

[the_rock]

I hear ya : - )

Anyway, hope that works.

Andy