Proxy-ARP on Debian Wheezy does not work as expected

The name of the pictureThe name of the pictureThe name of the pictureClash Royale CLAN TAG#URR8PPP











up vote
0
down vote

favorite












I am trying to setup a system composed by two Linux based gateways, and two Linux based boxes to communicate between the two boxes using a proxy_arp setup thru the two gateways.



In this example I am using the 12.0.0.0/24 network, because no piece of the network is going into the outside world. I think everything can be adapted to the class C setup too... Tell me if I am wrong.



Anyway, my network setup is like that:



 ++++++++++++++++++++++++++++++++++++++++ ethernet switch 1
| |
+ eth0 + eth0
| |
+-----------+ +----------------+
| 12.0.0.76 | + 12.255.255.254 +
+-----------+ +----------------+
Linux Box 1 Linux Gateway 1



++++++++++++++++++++++++++++++++++++++++ ethernet switch 2
| |
+ eth0 + eth0
| |
+-----------+ +----------------+
| 12.0.0.71 | + 12.255.255.254 +
+-----------+ +----------------+
Linux Box 2 Linux Gateway 2


Both Gateways are connected each other by a NULL MODEM SERIAL Cable and there is a 'socat' like program which is listening from ethernet and put the packets into serial and vice-versa. (almost like a ethernet-to-serial bridge)



All machines networks are statically configured (ifconfig):



Linux Box 1: 12.0.0.76 netmask 255.0.0.0 gateway 12.255.255.254


and



Linux Box 2: 12.0.0.71 netmask 255.0.0.0 gateway 12.255.255.254


and both



Gateways 12.255.255.254 netmask 255.0.0.0


and have proxy_arp enabled with sysctl



net.ipv4.conf.eth0.proxy_arp = 1 
net.ipv4.ip_forward = 1


Running the tcpdump -i eth0 arp on both Gateways it seems there is no ARP-Reply to the ARP Request because on the Linux Box 1 or 2, if I ping 12.0.0.76 or 12.0.0.71...



Here is the arp cache on the Linux Box 2:



$ arp -n
Address HWtype HWaddress Flags Mask Iface
12.0.0.76 (incomplete) eth0
12.255.255.254 ether 00:1b:c5:08:d4:11 C eth0


So I suppose the proxy_arp on 00:1b:c5:08:d4:11 (Gatway 2) DOES NOT WORK.



My goal is to reach the Linux Box 1 from Linux Box 2 and vice-versa (using proxy_arp) for example:



Linux Box 1:



$ mycommand-server listening on port 5020


Linux Box 2:



$ mycommand-client 12.0.0.76 port 5020









share|improve this question























  • The ARP in arp -n shows something is not going well. I would advise adding tcpdump traces or other kind of debugging data that you have available to the question.
    – Rui F Ribeiro
    Oct 10 '17 at 21:50














up vote
0
down vote

favorite












I am trying to setup a system composed by two Linux based gateways, and two Linux based boxes to communicate between the two boxes using a proxy_arp setup thru the two gateways.



In this example I am using the 12.0.0.0/24 network, because no piece of the network is going into the outside world. I think everything can be adapted to the class C setup too... Tell me if I am wrong.



Anyway, my network setup is like that:



 ++++++++++++++++++++++++++++++++++++++++ ethernet switch 1
| |
+ eth0 + eth0
| |
+-----------+ +----------------+
| 12.0.0.76 | + 12.255.255.254 +
+-----------+ +----------------+
Linux Box 1 Linux Gateway 1



++++++++++++++++++++++++++++++++++++++++ ethernet switch 2
| |
+ eth0 + eth0
| |
+-----------+ +----------------+
| 12.0.0.71 | + 12.255.255.254 +
+-----------+ +----------------+
Linux Box 2 Linux Gateway 2


Both Gateways are connected each other by a NULL MODEM SERIAL Cable and there is a 'socat' like program which is listening from ethernet and put the packets into serial and vice-versa. (almost like a ethernet-to-serial bridge)



All machines networks are statically configured (ifconfig):



Linux Box 1: 12.0.0.76 netmask 255.0.0.0 gateway 12.255.255.254


and



Linux Box 2: 12.0.0.71 netmask 255.0.0.0 gateway 12.255.255.254


and both



Gateways 12.255.255.254 netmask 255.0.0.0


and have proxy_arp enabled with sysctl



net.ipv4.conf.eth0.proxy_arp = 1 
net.ipv4.ip_forward = 1


Running the tcpdump -i eth0 arp on both Gateways it seems there is no ARP-Reply to the ARP Request because on the Linux Box 1 or 2, if I ping 12.0.0.76 or 12.0.0.71...



Here is the arp cache on the Linux Box 2:



$ arp -n
Address HWtype HWaddress Flags Mask Iface
12.0.0.76 (incomplete) eth0
12.255.255.254 ether 00:1b:c5:08:d4:11 C eth0


So I suppose the proxy_arp on 00:1b:c5:08:d4:11 (Gatway 2) DOES NOT WORK.



My goal is to reach the Linux Box 1 from Linux Box 2 and vice-versa (using proxy_arp) for example:



Linux Box 1:



$ mycommand-server listening on port 5020


Linux Box 2:



$ mycommand-client 12.0.0.76 port 5020









share|improve this question























  • The ARP in arp -n shows something is not going well. I would advise adding tcpdump traces or other kind of debugging data that you have available to the question.
    – Rui F Ribeiro
    Oct 10 '17 at 21:50












up vote
0
down vote

favorite









up vote
0
down vote

favorite











I am trying to setup a system composed by two Linux based gateways, and two Linux based boxes to communicate between the two boxes using a proxy_arp setup thru the two gateways.



In this example I am using the 12.0.0.0/24 network, because no piece of the network is going into the outside world. I think everything can be adapted to the class C setup too... Tell me if I am wrong.



Anyway, my network setup is like that:



 ++++++++++++++++++++++++++++++++++++++++ ethernet switch 1
| |
+ eth0 + eth0
| |
+-----------+ +----------------+
| 12.0.0.76 | + 12.255.255.254 +
+-----------+ +----------------+
Linux Box 1 Linux Gateway 1



++++++++++++++++++++++++++++++++++++++++ ethernet switch 2
| |
+ eth0 + eth0
| |
+-----------+ +----------------+
| 12.0.0.71 | + 12.255.255.254 +
+-----------+ +----------------+
Linux Box 2 Linux Gateway 2


Both Gateways are connected each other by a NULL MODEM SERIAL Cable and there is a 'socat' like program which is listening from ethernet and put the packets into serial and vice-versa. (almost like a ethernet-to-serial bridge)



All machines networks are statically configured (ifconfig):



Linux Box 1: 12.0.0.76 netmask 255.0.0.0 gateway 12.255.255.254


and



Linux Box 2: 12.0.0.71 netmask 255.0.0.0 gateway 12.255.255.254


and both



Gateways 12.255.255.254 netmask 255.0.0.0


and have proxy_arp enabled with sysctl



net.ipv4.conf.eth0.proxy_arp = 1 
net.ipv4.ip_forward = 1


Running the tcpdump -i eth0 arp on both Gateways it seems there is no ARP-Reply to the ARP Request because on the Linux Box 1 or 2, if I ping 12.0.0.76 or 12.0.0.71...



Here is the arp cache on the Linux Box 2:



$ arp -n
Address HWtype HWaddress Flags Mask Iface
12.0.0.76 (incomplete) eth0
12.255.255.254 ether 00:1b:c5:08:d4:11 C eth0


So I suppose the proxy_arp on 00:1b:c5:08:d4:11 (Gatway 2) DOES NOT WORK.



My goal is to reach the Linux Box 1 from Linux Box 2 and vice-versa (using proxy_arp) for example:



Linux Box 1:



$ mycommand-server listening on port 5020


Linux Box 2:



$ mycommand-client 12.0.0.76 port 5020









share|improve this question















I am trying to setup a system composed by two Linux based gateways, and two Linux based boxes to communicate between the two boxes using a proxy_arp setup thru the two gateways.



In this example I am using the 12.0.0.0/24 network, because no piece of the network is going into the outside world. I think everything can be adapted to the class C setup too... Tell me if I am wrong.



Anyway, my network setup is like that:



 ++++++++++++++++++++++++++++++++++++++++ ethernet switch 1
| |
+ eth0 + eth0
| |
+-----------+ +----------------+
| 12.0.0.76 | + 12.255.255.254 +
+-----------+ +----------------+
Linux Box 1 Linux Gateway 1



++++++++++++++++++++++++++++++++++++++++ ethernet switch 2
| |
+ eth0 + eth0
| |
+-----------+ +----------------+
| 12.0.0.71 | + 12.255.255.254 +
+-----------+ +----------------+
Linux Box 2 Linux Gateway 2


Both Gateways are connected each other by a NULL MODEM SERIAL Cable and there is a 'socat' like program which is listening from ethernet and put the packets into serial and vice-versa. (almost like a ethernet-to-serial bridge)



All machines networks are statically configured (ifconfig):



Linux Box 1: 12.0.0.76 netmask 255.0.0.0 gateway 12.255.255.254


and



Linux Box 2: 12.0.0.71 netmask 255.0.0.0 gateway 12.255.255.254


and both



Gateways 12.255.255.254 netmask 255.0.0.0


and have proxy_arp enabled with sysctl



net.ipv4.conf.eth0.proxy_arp = 1 
net.ipv4.ip_forward = 1


Running the tcpdump -i eth0 arp on both Gateways it seems there is no ARP-Reply to the ARP Request because on the Linux Box 1 or 2, if I ping 12.0.0.76 or 12.0.0.71...



Here is the arp cache on the Linux Box 2:



$ arp -n
Address HWtype HWaddress Flags Mask Iface
12.0.0.76 (incomplete) eth0
12.255.255.254 ether 00:1b:c5:08:d4:11 C eth0


So I suppose the proxy_arp on 00:1b:c5:08:d4:11 (Gatway 2) DOES NOT WORK.



My goal is to reach the Linux Box 1 from Linux Box 2 and vice-versa (using proxy_arp) for example:



Linux Box 1:



$ mycommand-server listening on port 5020


Linux Box 2:



$ mycommand-client 12.0.0.76 port 5020






debian networking proxy proxy-arp






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited Oct 10 '17 at 13:21

























asked Oct 10 '17 at 11:19









Gianluca Renzi

11




11











  • The ARP in arp -n shows something is not going well. I would advise adding tcpdump traces or other kind of debugging data that you have available to the question.
    – Rui F Ribeiro
    Oct 10 '17 at 21:50
















  • The ARP in arp -n shows something is not going well. I would advise adding tcpdump traces or other kind of debugging data that you have available to the question.
    – Rui F Ribeiro
    Oct 10 '17 at 21:50















The ARP in arp -n shows something is not going well. I would advise adding tcpdump traces or other kind of debugging data that you have available to the question.
– Rui F Ribeiro
Oct 10 '17 at 21:50




The ARP in arp -n shows something is not going well. I would advise adding tcpdump traces or other kind of debugging data that you have available to the question.
– Rui F Ribeiro
Oct 10 '17 at 21:50















active

oldest

votes











Your Answer







StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "106"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
convertImagesToLinks: false,
noModals: false,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);



);













 

draft saved


draft discarded


















StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f397219%2fproxy-arp-on-debian-wheezy-does-not-work-as-expected%23new-answer', 'question_page');

);

Post as a guest



































active

oldest

votes













active

oldest

votes









active

oldest

votes






active

oldest

votes















 

draft saved


draft discarded















































 


draft saved


draft discarded














StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f397219%2fproxy-arp-on-debian-wheezy-does-not-work-as-expected%23new-answer', 'question_page');

);

Post as a guest













































































Popular posts from this blog

How to check contact read email or not when send email to Individual?

Bahrain

Postfix configuration issue with fips on centos 7; mailgun relay