Re: Issues with ARP notification on latest CVS of wackamole
Theo Schlossnagle <[email protected]> Tue, 13 Apr 2004 08:34:36 -0400
| Newsgroups | gmane.comp.apache.mod-wackamole.general |
|---|---|
| Message-ID | <[email protected]> |
On Apr 12, 2004, at 1:37 PM, Jay West wrote: > So we put in the latest CVS and still have the problem it appears. If > we > fail all machines in the cluster, when they come back up outside > references > to those machines hit the cisco pix, and the pix has the arp entries > for > those IP's on the wrong (old) machines. We can immediately fix this > problem > by doing a "clear arp" on the cisco pix. However, I don't think this > is a > pix issue. I think it is the PIX not allowing arp-spoofing -- it is a firewall after all :-) Perhaps the ARP reply packets need to be addressed specifically to the PIX's MAC address. I looked through the documentation, but I don't see anything that mentions how to send unsolicited ARP replies to a PIX. Any insight would be appreciated. Whatever it is, I am sure it is a simple software fix. // Theo Schlossnagle // Principal Engineer -- http://www.omniti.com/~jesus/ // Postal Engine -- http://www.postalengine.com/ // Ecelerity: fastest MTA on Earth