static arp entry

awreneau · 12-12-2007, 02:04 PM

Reverse Proxy is in the DMZ, real server is in protected network. Reverse Proxy can connect to protected server sporadically.

I've found the problem to be that the PIX is advertising itself when the ARP is made to identify the protected server and on some occassions the protected server responds correctly.

I can put a static arp entry arp -s <IP> <MAC> and it works. However rebooting clears the arp table.

Is there a way to assign a static to survive a reboot?

fotoguy · 12-12-2007, 02:12 PM

You could place an entry in the rc.local file, I don't use ubuntu myself but I would say it probably somewhere like /etc/rc.d or /etc/init.d/rc.d. may need to search around a bit for it. The rc.local is the last bootup file that is executed.

awreneau · 12-12-2007, 03:01 PM

That did it!

Thanks for your help.

unSpawn · 12-12-2007, 03:39 PM

AFAIK static ARP settings should be in /etc/ethers and whatever handles network ups/downs should execute 'arp -f /etc/ethers'.

awreneau · 12-12-2007, 03:57 PM

I created the file /etc/ethers and have the following in it:
02:00:00:00:00:00 111.111.111.111 (obviously bogus info)

Not sure if I know is going to call it. your post says
"whatever handles network ups/downs should execute 'arp -f /etc/ethers'"

is this a startup script I'll have to edit or should something call this automatically?

unSpawn · 12-12-2007, 04:27 PM

I'm hoping it would be automagical but let's assert it's not and that you would have to edit say /etc/init.d/network or equivalent and only add a line where things go "up"?