cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1800
Views
0
Helpful
4
Replies

I have internet problem, when no ip proxy-arp

wisit_jan
Level 1
Level 1

6500 is core switch, have 2 vlan

vlan 101 (server)

ip add 172.16.1.254/24

vlan  22 (client)

ip add 172.16.22.254/24

interface Vlan101

ip address 172.16.1.254 255.255.255.0

ip helper-address 172.16.1.102

no ip proxy-arp

!

interface Vlan22

ip address 172.16.22.254 255.255.255.0

ip helper-address 172.16.1.102

no ip proxy-arp

!

ip route 0.0.0.0 0.0.0.0 172.16.1.253

Internet Proxy server: 172.16.1.212 (vlan101)

Internet Firewall: 172.16.1.253 (vlan101)

All Client config proxy server on Internet Explorer

When Client on vlan22 access to Internet is very slow. But I move client to vlan 101 and change gateway to 172.16.1.253 then access to internet is fine

So I enter "ip proxy-arp" command on interface vlan101, everything is fine internet is fine and fast.

I think because Firewall is same subnet with proxy server and icmp redirect is enable, so occur Internet slow problem.

I think "ip proxy-arp" command make icmp redirect to disable.

But I am not sure that "ip proxy-arp" or icmp redirect is a problem

Please suggest me for this reason or share a document that why enter "ip proxy-arp" can reslove this problem?

I can't to explain my customer that icmp redirect is problem because I not found the document or word that explain icmp redirect can make a network to slow.

4 Replies 4

rais
Level 7
Level 7

But I move client to vlan 101 and change gateway to 172.16.1.253 then access to internet is fine

Is the client using gateway 172.16.1.253?

Regards.

All gateway are x.x.x.254 I just point direct to firewall for test internet is work.

So this makes the following correct:

vlan 101 (server)

ip add 172.16.1.254/24

vlan  22 (client)

ip add 172.16.22.254/254  [/24]

What is this then?

interface Vlan101

ip address 172.16.1.252 255.255.255.0

ip helper-address 172.16.1.102

no ip proxy-arp

!

interface Vlan22

ip address 172.16.22.252 255.255.255.0

ip helper-address 172.16.1.102

no ip proxy-arp

Hi Rais,

Thank you for your comment. I have worng info in question I edited to correct

Review Cisco Networking products for a $25 gift card