Re: proxy arp behaviour

From: Marco Berizzi
Date: Mon Mar 29 2004 - 12:05:08 EST


My apologies Chris.
I haven't full explained my configuration.
Here is:

ifconfig eth0 172.17.1.1 netmask 255.255.255.0
ifconfig eth1 10.77.77.1 netmask 255.255.255.252


ip route del 172.17.1.0/24 dev eth0
ip route del 10.77.77.0/30 dev eth1

ip route add 172.17.1.254 dev eth0
ip route add 172.17.1.0/24 dev eth1

ip rule add iif eth1 table dmz-ipsec priority 504

ip route add default via 172.17.1.254 dev eth0 table main metric 1
ip route add default via 172.17.1.254 dev eth0 table dmz-ipsec metric 1
ip route flush cache

echo 1 > /proc/sys/net/ipv4/conf/eth0/proxy_arp
echo 1 > /proc/sys/net/ipv4/conf/eth1/proxy_arp


Now, hosts connected to eth1 are all 172.17.1.0/24.

The linux box is now replying to arp requests for
172.17.1.0/24 hosts, sent by 172.17.1.0/24 hosts,
on the eth1 network segment.


Chris Friesen wrote:

> Marco Berizzi wrote:
>
> > eth1 configuration is here:
> >
> > ifconfig eth1 10.77.77.1 broadcast 10.77.77.3 netmask 255.255.255.252
> > ip route del 10.77.77.0/30 dev eth1
> > ip route add 172.17.1.0/24 dev eth1
> >
> > echo 1 > /proc/sys/net/ipv4/conf/eth1/proxy_arp
> >
> > Hosts connected to eth1 are all 172.17.1.0/24.
> > The linux box is now replying to arp requests
> > that are sent by 172.17.1.0/24 hosts on the eth1
> > network segment.
>
> Arp requests for what IP addresses?

The linux box is replying to arp requests for 172.17.1.0/24, sent
by 172.17.1.0/24 systems (windoze 2000 and Linux 2.4.25).
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/