I know that proxy-arp is the right way to go. Proxy ARP will not perform the address translation needed from private IP space to public IP space. Proxy-arp in simplistic terms is a method to basically bridge two network segments on two separate interfaces (see more at http://en.wikipedia.org/wiki/Proxy_ARP). You will need to either find the way to enable NAT on the HiperARC (sorry never tried it) or place a router or PC in front of the HiperARC to do the NAT translations as Wayne suggested. In the past we've found it best to assign private addresses to the IP pool as well as the HiperARC and perform the translations on another router dedicated to this traffic (depending on how many calls you are supporting). Even a simple Linksys router from your local office superstore would do the trick depending on your requirements. We would then forward the administrative ports through the NAT to the HiperARC so that we could access the ARC from public address space. Please keep in mind that if you are providing internet access to dial in users like an ISP would that NAT may interfere with some applications working properly across the internet. For this reason I believe most people opt to use public IP addresses even if it means calling your upstream provider and requesting more. I hope this helps, Brandon Lehmann CCNA, CFOT, A+ Network Administrator Great Lakes Internet Service, LLC 218 Justice St. Fremont, OH 43420 blehmann@glis.cc On 1/3/07 10:34 AM, "Lewis Bergman" <lbergman@wtxs.net> wrote:
Todd Bertolozzi wrote:
Reading Wayne Tuckers response to you makes sense. It's been a while since I've been heavily involved with the total controls and we always used public ip space, but what about using proxy-arp on the hiperarc?
Anyone on the list have any comments regarding doing it this way? I believe it will work for you. Enable proxy-arp and let the hiper arc do the "routing" from public to private space. I could be totally off base and I don't have any test chassis's at the moment to play with but you could give it a try unless someone else has a different suggestion.
Todd I would think that would work but I don't have a spare one to try it out on either. enabLE ip prOXY_ARP_ALL_DIALIN