[LARTC] ip conflict with proxy arp

[LARTC] ip conflict with proxy arp

[Rohan Almeida]

HI,
I've got a proxy arp setup with iptables and tc.
 
on eth0 i have a route to 172.16.2.0/24 network
on eth1 is the LAN of 172.16.1.0/24 network
 
I have enabled proxy arp on both interfaces.
Now accordingly, the interface will respond
to all ARP requests for which it has a route to.
 
Noy my setup is such, that a user on the LAN,
would like to have an ip from the 172.16.2.0/24 network.
 
But unfortunately, when he tries to allocate an
ip like 172.16.2.1 he gets an ip conflict.
 
I also know why he is getting it!
But is there any way out of this??
 
Something like, tell the linux server to respond for
ARP requests for the 172.16.2.0/24 network but at the
same time if a machine is trying to use an ip for itself,
then it should not respond.
 
Help!
 
--
arc_of_descent
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Re: [LARTC] ip conflict with proxy arp

[Evgeni Gechev]

Rohan Almeida wrote:

> HI,
> I've got a proxy arp setup with iptables and tc.
>
> on eth0 i have a route to 172.16.2.0/24 network
> on eth1 is the LAN of 172.16.1.0/24 network
>
> I have enabled proxy arp on both interfaces.
> Now accordingly, the interface will respond
> to all ARP requests for which it has a route to.
>
> Noy my setup is such, that a user on the LAN,
> would like to have an ip from the 172.16.2.0/24 network.
>
> But unfortunately, when he tries to allocate an
> ip like 172.16.2.1 he gets an ip conflict.
>
> I also know why he is getting it!
> But is there any way out of this??
>
> Something like, tell the linux server to respond for
> ARP requests for the 172.16.2.0/24 network but at the
> same time if a machine is trying to use an ip for itself,
> then it should not respond.
>
> Help!
>
> --
> arc_of_descent
> _______________________________________________
> LARTC mailing list / LARTC@mailman.ds9a.nl
> http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Just add a route to 172.16.2.1/32 on eth1.
But you should add such route not only for escaping the ip conflict.

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/