PIX proxy-arp

[wmmak]

Dear all,

I know that PIX is supporting proxy-arp.

Is it mean that if PIX has the default route to the internet, then the PIX can response to the client workstation(didn't set the default route), when the client workstation's going to Internet, provided that the NAT is configured.

Thanks and Regards,

mak

[sachinraja]

Hello Mak,

ARP works on layer 2.. proxy arp is a feature by which , the PIX gives/proxies its ARP address to the outside .So, any packet from the outside , if destined for a directly connected segment of the PIX, the desination ARP will be of the PIX, and the PIX forwards packets to the end user.

Anyway, for any client workstation to access internet, you need to have a default route set to the PIX inside interface. this is the layer 3 information you are giving, which is critical..

hope this helps..all the best...

[wmmak]

Hello,

Is it only work on PIX's direct connected interface? So, the workstation in PIX inside directly connected interface (same subnet) can access to other workstation at PIX's outside, or other directly connected interface, am I correct?