On Wed, 28 Sep 2005 14:14:32 -0700 James Roberson <[EMAIL PROTECTED]> wrote:
> I think I know what's going on. I just noticed the cidr/27. Should > be /32. The subnet is /27, but I'm pretty sure this should be /32 > (255.255.255.255). Yes, aliased IPs allways use /32 if the parent IP is on the same subnet. Marcin. > > At 01:58 PM 9/28/2005, you wrote: > >Well that should be responding to proxy arp.. Weird. If you need > >this working now change the virtual ip to a carp type. In the > >meantime I'll run some tests. > >On 9/28/05, James Roberson <[EMAIL PROTECTED]> wrote: > > > Its running for the VIP, vr0 is the wan (I added the x's). > > > > > > root 485 0.0 0.3 1192 764 ?? Ss 1:30PM 0:00.00 > > > /usr/local/sbin/choparp vr0 auto xxx.xxx.149.241/27 > > > > > > > > > At 12:51 PM 9/28/2005, you wrote: > > > >Is choparp running on your system? ps awux | grep chop from a > > > >shell will tell us. > > > > > > > >Scott > > > > > > > > > > > >On 9/28/05, James Roberson <[EMAIL PROTECTED]> wrote: > > > > > First some background. I have a multinat configuration > > > > > working in > > monowall > > > > > (mutiple wan IP addresses to 1 or many internal IPs) so > > > > > pfsense is > > not so > > > > > foreign to me. I've tried setting up a similar environment in > > > > > pfSense 0.85.2. For simplicity, I first tried a basic http > > > > > port forwarding nat configuration. It didn't work. > > > > > > > > > > I setup a virtual IP for the external IP using proxy arp > > > > > (seems > > like the > > > > > proxy arp and server nat settings from monowall combined). > > > > > Under > > "NAT: Port > > > > > Forward" I set the newly created VIP to point to the internal > > > > > IP > > (checked > > > > > the box to make the rule). Everything looks like it should > > > > > work but it doesn't. I also tried 1 to 1 with no luck. > > > > > > > > > > An external ethereal cap with monowall shows monowall > > > > > answering arp requests for the virtual IP. The same external > > > > > capture with pfsense > > shows > > > > > no arp replies from pfsense. Besides the radio button on the > > > > > virtual IP menu, is there another setting for proxy arp? > > > > > > > > > > Thanks > > > > > > > > > > > > > > > James Roberson > > > > > > > > > > > > > > > > > > > > --------------------------------------------------------------------- > > > > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > > > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > > > > > > > > > > > > >--------------------------------------------------------------------- > > > >To unsubscribe, e-mail: [EMAIL PROTECTED] > > > >For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > > > > > > > --------------------------------------------------------------------- > > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > > > > >--------------------------------------------------------------------- > >To unsubscribe, e-mail: [EMAIL PROTECTED] > >For additional commands, e-mail: [EMAIL PROTECTED] > > > James Roberson > TDI Library Services, Inc. (www.tdico.com) > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
