Hot!Proxy ARP Necessary?

Author
Sota
New Member
  • Total Posts : 2
  • Scores: 0
  • Reward points: 0
  • Joined: 2021/09/29 00:48:48
  • Status: offline
2021/09/29 01:14:02 (permalink) 6.2
0

Proxy ARP Necessary?

Hello, 
We recently updated our FortiOS from 6.2.3 to 7.0.1.
 
6.2.3: Proxy-ARP was "disabled", but SSL-VPN worked.  VPN clients and servers could connect to each other.
7.0.1: Proxy-ARP needs to be "enabled".  Otherwise, the SSL-VPN connection doesn't work.
 
7.0.1: Proxy-ARP "enabled" & NAT "enabled" = Ping OK.
7.0.1: Proxy-ARP "enabled" & NAT "disabled" = Ping doesn't work.
 
Does anyone know if there are any system changes for Proxy-ARP between 6.2.3 and 7.0.1?
I'd like to know what are the correct behavior and settings, and why these changes appear between 6.2.3 and 7.0.1.
 
Thank you very much!!
 
Sota
#1

2 Replies Related Threads

    Kangming
    Silver Member
    • Total Posts : 62
    • Scores: 2
    • Reward points: 0
    • Joined: 2018/09/17 18:55:22
    • Status: offline
    Re: Proxy ARP Necessary? 2021/09/29 09:33:40 (permalink)
    0
    Hi
     
    Could you post your configuration?

    Thanks
    Kangming
    #2
    Sota
    New Member
    • Total Posts : 2
    • Scores: 0
    • Reward points: 0
    • Joined: 2021/09/29 00:48:48
    • Status: offline
    Re: Proxy ARP Necessary? 2021/09/29 19:48:30 (permalink)
    0
    Hello, thank you for the reply!
     
    Previous Version: 6.2.3 build1066
    Current Version: 7.0.1 build0157
    -----------------------------------------
    config system proxy-arp
    edit 1
    set interface "internal1"
    set ip 10.24.56.2
    set end-ip 10.24.56.254
    next
    end
    -----------------------------------------
    VPN Client: 10.24.56.2 - 254
    FortiGate Internal1: 10.24.0.41
    Office Network: 10.24.0.0/16
    Servers: 10.24.0.XXX
    #3
    Jump to:
    © 2021 APG vNext Commercial Version 5.5