SRX

last person joined: 2 days ago 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.

  • 1.  Proxy ARP and DIP configuration on SSG Firewall

    Posted 01-11-2016 01:40
      |   view attached

     

    Hello,

     

    I'm having a few issues setting up proxy ARP and DIP on a SSG firewall - (Error message is attached) It is complaining about the fact the interface has an IP in a different subnet than the proxy ARP range. I know this can be done as I have this configured on our SRX firewall but obviously i'm missing something here 🙂

     

    Many Thanks!

     

     



  • 2.  RE: Proxy ARP and DIP configuration on SSG Firewall

    Posted 01-11-2016 02:07

    Hi !

     

    The neighboring router to your SRX will not issue an arp request for a nonlocal network, which means if the network of the destination-Ip is not directly connected he will forward the packet to the next hop and only send out an arp request for getting the mac-address of the next hop.

     

    Therefore in your case you do not need a proxy-arp for a non-interface related network address.

     

    so maybe you need to specify your network more exactly, including the IP-settings and routes of the neighboring router to explain why you would need a proxy-arp in your case

     

    with best regards

     

    alexander



  • 3.  RE: Proxy ARP and DIP configuration on SSG Firewall
    Best Answer

     
    Posted 01-11-2016 02:07

    Hello ,

     

    Please move this to  : http://forums.juniper.net/t5/ScreenOS-Firewalls-NOT-SRX/bd-p/Firewalls

     

    as this is related to ScreenOS . In SRx we can do this via CLI .



  • 4.  RE: Proxy ARP and DIP configuration on SSG Firewall

    Posted 01-11-2016 02:28

    Posted in the SSG forums instead, thanks