Duplicate IPs using proxy_arp

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



This is the scenario..
I have a Public IP segment... 148.235.x.x/28
i have my private IP segment 10.10.1.0/24

One of my public ip is used on my router. (148.235.x.97/28)

I read about proxy arp to permit part on two my public network without change the config of my machines.

So, this is my linux..

eth0=148.235.x.103/28
eth1=10.10.1.1/24
eth2=148.235.70.103/28

The eth1 and eth2 are connected to the same switch. eth0 is connected to the router.

So.. i did:
ip route del 148.235.x.x/28 dev eth0
ip route del 148.235.x.x/28 dev eth2
ip route add 148.235.x.97 dev eth0
ip route add 148.235.x.x/28 dev eth2
echo 1 > /proc/sys/net/ipv4/conf/eth0/proxy_arp
echo 2 > /proc/sys/net/ipv4/conf/eth2/proxy_arp

The machines with the public Ips are working good, but i have problems with my network 10.10.1.0/24. The machines are reporting duplicated Ips.. I read about i need make filters on ARP request.. so, i use this on my sysctl.conf
net.ipv4.conf.all.arp_filter=2
net.ipv4.conf.default.arp_filter = 1
net.ipv4.conf.eth0.arp_filter=1
net.ipv4.conf.eth1.arp_filter=1
net.ipv4.conf.eth2.arp_filter=1
net.ipv4.conf.default.log_martians = 1
net.ipv4.conf.all.arp_ignore=1
net.ipv4.conf.eth0.arp_ignore=1
net.ipv4.conf.eth1.arp_ignore=1
net.ipv4.conf.eth2.arp_ignore=1
net.ipv4.conf.default.arp_announce=2
net.ipv4.conf.all.arp_announce=2
net.ipv4.conf.eth0.arp_announce=2
net.ipv4.conf.eth1.arp_announce=2
net.ipv4.conf.eth2.arp_announce=2

I apply the parameters using sysctl -p
and when a machine connect to the network, i saw this on arp  tables:

10.10.1.188 ether 00:04:23:CB:00:CA C eth2 10.10.1.188 ether 00:12:17:98:C2:5F C eth1

00:04:23:CB:00:CA   its the MAC of the eth1 nic.
00:12:17:98:C2:5F   its the Real MAC of my client.


But i still having Duplicated IPs.

How can i fix that?

Thanks.



--
Ing. Rogelio C. Sevilla Fernández
Dirección de Desarrollo Telemático / Secretaria de Administración
Tel (312)3162062 / (312)3162000 ext 2360
Gobierno del Estado de Colima.

-----------------------------------------------------
 "2006, AÑO DEL BICENTENARIO DEL NATALICIO DEL LIC.
    BENITO JUAREZ BENEMERITO DE LAS AMERICAS"
-----------------------------------------------------




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux