515E 1:1NAT and ARP issues

[register]

So here's the issue....I have a 515E....I have a mail server.

I setup 1:1 NAT rule and security rule and it works and it's accessible from the outside world.....now the issue.

If I go to a desktop on the LAN they can Ping the mail server once and then it fails...I traced it to an ARP issue.

After figuring out that the desktops are essentially hitting the firewall for the MAC address and not the actual server itself.

It's doing this for both servers that are currently setup with 1:1 NAT.

Am I missing something really basic?

Victor

[Nagaraja Thanthry]

Hello,

On the inside interface of the firewall, turn off proxy arp.

sysopt noproxyarp inside

Hope this helps.

Regards,

NT

[register]

NT,

Thanks for the reply....I actually stumbled accross this link that pointed me in this direction.

I just blows me away that a factory default config would have so many issue...oh well, lesson learned and everything is working the way it is supposed to now.

Thanks again.

https://supportforums.cisco.com/docs/DOC-3155

[Nagaraja Thanthry]

Hello,

Glad that it is fixed. Please mark the question as answered so somebody else

can make use of the information in the future.

Regards,

NT