NAT with Proxy ARP

Hello Gurus!

I'm currently trying to configure NAT using proxy ARP on a SunOS 5.8 .

This box is running Check Point FW1 that sits behind my internet router.

I have a server that is connected to the firewall box. I want to translate this server using proxy ARP.

Settings:

==========================================================

A) FW box "Public" interface IP address: 10.1.1.1 (in actual situation uses real public IP).

B) FW box internal interface IP address: 172.16.1.1

c) Server interface IP address: 172.16.1.5

I want the server to be translated to the IP 10.1.1.5.

I have gone through these steps in order to set it up

Steps:

=========================================================

1) Set the FW interface to answer for ARP request for 10.1.1.5

arp -s 10.1.1.5 08:00:20:c4:4a:e6 pub

08:00:20:c4:4a:e6 is the FW ethernet address.

2) Add routing entries to send traffic to the right destination

route add -host 10.1.1.5 172.16.1.5

==========================================================

There are currently 2 other servers NATted this way on the firewall and they work just fine.

Firewall rules allow certain tcp connections and icmp to to 10.1.1.5 and 172.16.1.5

Am I missing anything? What should I do to make it work...

Been trying for the past 4 hours and its already past midnight

Thank you so much for any help!

Azzuwan,

Kuala Lumpur, Malaysia

[2011 byte] By [BigEars] at [2007-11-25 22:44:03]
# 1

arp is ok, You need a firewall rule that will accept traffic from source to destination.

Example:

rule base:

ANY -> 10.1.1.5 -> tcp/icmp traffic -> accept

Address translation rule:

ANY -> 10.1.1.5 -> tcp/icmp traffic = any -> 172.16.1.5

basicall you don't need additional routing - CP will route instead of OS (if there is a firewall interface from 172.16.1.X subnet; if not then you need static route)

Aljosa

aljosap at 2007-7-5 16:55:58 > top of Java-index,General,Network Configurations...