Cisco ASA ARP Behavior

The Cisco ASA can exhibit some non-standard ARP behavior depending on the OS version and system configuration. Here are some notes to remember this by.

NOTE: Do not confuse this with sysopt noproxyarp command which is off by default. The proxy arp on the ASA is important to allow the ASA to answer ARP requests for NAT hosted private servers appearing as a separate public IP on the ASA outside interface. Leave the sysopt command for proxy arp set to the default so that NAT proxy arp will function correctly.

About notesbytom

Keeping technology notes on to free up my mind to solve new problems rather than figuring out the same ones repeatedly :-).
This entry was posted in Networking and tagged , . Bookmark the permalink.

1 Response to Cisco ASA ARP Behavior

  1. Pingback: ARP Timeout in Cisco IOS | Notes by Tom

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s