Let's say the ASA is connected to a PVLAN enabled L2 network. In that case I would use sysopt noproxyarp .
> Hi Mike, > Yes, I'm familiar with it. It's the same as you say "sysopt noproxyarp" on > the ASA. > My question is about why would you do it? Can someone will give me a good > example? > > I'm doing a task and it asks to configure a peer for a pair of HSRP > routers. I'll have to give a sketch of the topology to make it more or less > clear: > > R1----+--- R2-----(163.1.132.0)-----ASA-----R6 > R3----| > > So to be precise R1 and R3 should have their IPSec peer set to > 163.1.132.113 which is ASA interface. > The solution configures static NAT on R2 binding 163.1.132.113 to R6 > loopback: > > ip nat inside source static 6.0.0.1 163.1.132.113 no-alias > > If R2 will stop responding to ARP requests sent to 163.1.132.113 how the > whole thing will work ? > > Eugene > > >
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
