Proxy Arp

[Gspot]

We have installed our version and are having problems with Proxy ARP.

We want certain special hotspot users to have a static IP address. The other customers we want to have DHCP address.

We have the DHCP server enabled on default and that issues the 10.20.7.x address with no problems.

We then enable ProxyARP with 1 ip off 20.20.20.1 (Just a random IP thats on the same network subnet as our public card 20.20.20.254)

When we reset the service the DHCP client PC automaticlly gets assigned this 20.20.20.1 address and not the 10.20.7.x address.

If we disable DCHP on the client PC and then manually enter the 20.20.20.1 this also works.

So the question is:

How do we give people static address (manually entered on PC's) and still have DHCP customers using the standard 10.20.7.x range!

Example:

Customer a: 20.20.20.1 IP address (Public address) on ProxyARP
Customer B: 10.20.7.x DHCP address


Thanks,

G

[alan]

Currently, turning on ProxyARP will change DHCP server behavior so that it will only deliver IP in the ProxyARP list (i.e. 20.20.20.1).

You need to manually assign IP 10.20.7.x in the client side. Note that in this case you need to add return path in the router in the next hop (since NAT is off).
_________________
~ Patronsoft Limited ~

[Gspot]

Thanks Alan,

Is there going to be any updates or changes where the DHCP will function because that defeats the point of a hotspot.

If a customer jumps on the connection in say a coffee shop who would be there to tell them which IP address to use?

We have customers like this and then standard business type customers who require a static address for mail etc.

thanks,

G

[alan]

If all you want is static IP, you probably don't need ProxyARP at all. You can just use the static IP-MAC mapping within DHCP server.
_________________
~ Patronsoft Limited ~

[Gspot]

We need a static IP thats on the public side range (EG: 20.20.20.x) address because then we can NAT this on our main firewall (Cisco Pix).

[alan]

So you just want ProxyARP without changing DHCP behavior, right?

At this moment, FirstSpot is not designed this way. The workaround I can think of for you is:

1) turn off NAT

2) but keep ProxyARP off

3) setup return path in your PIX so that the return traffic will be routed back to 10.20.7.x. Also, you might want to setup port forwarding to a subset IP (e.g. 10.20.7.200-254) so that they can be accessed from public. I assume you will manually set the IP in the client for this subset IP.

4) put 10.20.7.200-254 in the Excluded IP list in our DHCP server
_________________
~ Patronsoft Limited ~

[Gspot]

Thanks Alan,

We will try this theory tommorow. MAybe an idea there to add to future releases of this great product! :)