Adding another 1:1 NAT address doesn't work for me.

cpk

I've configured inbound services on separate IP's, and all is working well. The outside of my firewall is a single Ethernet adapter connected to my ISP's router. On that adapter, I have the following virtual IP addresses:

.3, .4. .5, .6, .8, .9, .10, .15, .18

These are used for DNS servers, mail servers, web servers, etc. All except the last two have worked fine for months. Yesterday, I added .15 for a test web server without issues. Today, I tried to add .18 for another test web server, and I can't get it to work.

I captured a network trace while testing a connection from the WAN network (.254) to the .18 web server (I've removed the actual IP address range):

11:28:25.564474 ARP, Request who-has xxx.xxx.xxx.18 (00:00:00:00:04:43 (oui Ethernet)) tell xxx.xxx.xxx.254, length 46
11:28:25.826951 ARP, Request who-has xxx.xxx.xxx.18 (00:00:00:00:04:43 (oui Ethernet)) tell xxx.xxx.xxx.254, length 46
11:28:26.793076 ARP, Request who-has xxx.xxx.xxx.18 (00:00:00:00:04:43 (oui Ethernet)) tell xxx.xxx.xxx.254, length 46
11:28:27.793730 ARP, Request who-has xxx.xxx.xxx.18 (6f:6d:00:00:01:00 (oui Unknown)) tell xxx.xxx.xxx.254, length 46
11:28:28.796194 ARP, Request who-has xxx.xxx.xxx.18 (6f:6d:00:00:01:00 (oui Unknown)) tell xxx.xxx.xxx.254, length 46

From what I can tell, this shows me that firewall computer isn't responding to the IP address as if the card doesn't have that address assigned to it.

Could it be that I can't assign more than 8 addresses for the WAN port to listen on?
Does anyone have any suggestions for the troubleshooting next step?

cmb

What type of virtual IP?

cpk

I'm using "Proxy ARP" for each single IP address.

cmb

Go to Diagnostics>Command and run:

ps ax |grep arp

and post the output of that.

cpk

Thanks for the help. Here's the output:

19081 ?? Ss 0:03.20 /usr/local/sbin/choparp fxp0 auto xxx.xxx.xxx.3/32 xxx.xxx.xxx.4/32 xxx.xxx.xxx.5/32 xxx.xxx.xxx.6/32 xxx.xxx.xxx.8/32 xxx.xxx.xxx.9/32 xxx.xxx.xxx.10/32 xxx.xxx.xxx.15/32
52623 ?? Ss 0:04.13 /usr/local/sbin/choparp rl0 auto xxx.xxx.xxx.18/32

I've hidden the actual IP range. If you'd like to see that, just let me know.

cmb

Looks like you have it configured on the wrong NIC? all your other IPs are on fxp0, your .18 IP is on rl0.

cpk

Thank you SO VERY much. I had noticed that the address wasn't in the first line, and I didn't even look at the second line.

It works great now! I can't say enough good things about this product to do it justice!