PIX does not answer arp request

[Guest]

Posted by: pnparadis - Feb 17, 2006, 5:48am PST


I've added a server (Proliant 3000, WIndows 2000 SP4) in the DMZ, but the
PIX doesn't answer his ARP request. The access-list are OK. If i enter
statics entries in the ARP tables (PIX and Server), they can communicate
normally, but without these lines, nothing works, the PIX doesn't answer.
Why? is there any configuration to add to the PIX? THe server is able to ping
all the other servers in the DMZ.

Thank you!

 

[Kurt]

A PIX can be configured to block almost anything, so I suspect it could be
configured not to reply to arp requests. One possible scenario might be to
prevent users from bypassing a proxy server. The proxy server could have a
static entry. But no one else, even if they knew the IP address, would be
able to get directly to the PIX.

....kurt

 

[Guest]

The PIX answer all the other server in the DMZ... I'v added arp entries
manually, on both the PIX and the server and it worked... However, I would
like to find a "real" solution...

Thanks

Pierre-Nicolas