Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Ugur_Urel
Explorer

Allow ping for proxy arp ip address

Hi all,

Our firewall has several public ip addresses on external interface using proxy arp. Lets assume these public addresses are from 192.168.1.0 network.

Following ip addresses are assigned to interfaces directly;

  • 192.168.1.1 (node1)
  • 192.168.1.2 (node2)
  • 192.168.1.3 (cluster ip)

192.168.1.4 and 192.168.1.5 assigned using proxy arp.

I would like to allow ping the ip address 192.168.1.4 from internet. I have defined a rule for 192.168.1.4 with icmp echo-request, I can see in the logs that traffic accepted but I can not ping from internet. Also if I add 192.168.1.3(cluster ip) to this rule, I can ping 192.168.1.3 from internet. 

How can I allow this traffic? By the way "Merge manual proxy arp configuration" option in the global properties is checked.

0 Kudos
6 Replies
This widget could not be displayed.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events