ASA' proxy-arp doesnt work

[Andrii Oliinyk]

I have multisubnet setup where clients behind one of the interfaces fail to configure default gateway properly. to speedup process i've configured NAT-rule (1st in chain)

nat (VLAN.803,any) source static VLAN803 VLAN803 destination static BMUVLANS BMUVLANS route-lookup

with it i expected ASA to start to respond ARP-queries from clients in VLAN 803 with its own VLAN.803 MAC, but it doesnt do.

i've verified it with capture. what can prevent ASA from ARP-proxying in this case?

[Marvin Rhoads]

Check the output from "show run all | i proxyarp".

[Andrii Oliinyk]

Hi Marvin

highly appreciate your input, it looks like this for target VLAN

no sysopt noproxyarp VLAN.803 .  negating of negating 

[Marvin Rhoads]

Hmm so the double negative means the interface should proxy-arp as needed. The NAT rule doesn't specify the "no proxy-arp" option so that shouldn't affect it either.