Allied Telesis AT-WR4500 manual Proxy-ARP feature, Address MAC-ADDRESS Interface

AT-WR4500 Series - IEEE 802.11abgh Outdoor Wireless Routers	89
RouterOS v3 Configuration and User Guide

If ARP feature is turned off on the interface, i.e., arp=disabled is used, ARP requests from clients are not answered by the router. Therefore, static ARP entry should be added to the clients as well. For example, the router's IP and MAC addresses should be added to the Windows workstations using the arp command:

C:\> arp -s 10.5.8.254 00-aa-00-62-c6-09

If arp property is set to reply-onlyon the interface, then router only replies to ARP requests. Neighbour MAC addresses will be resolved using /ip arp statically, but there will be no need to add the router's MAC address to other hosts' ARP tables.

Example

[admin@AT-WR4562] ip arp> add address=10.10.10.10 interface=ether2 mac-address=06 \ \... :21:00:56:00:12

[admin@AT-WR4562] ip arp> print

Flags: X - disabled, I - invalid, H - DHCP, D - dynamic

#	ADDRESS	MAC-ADDRESS	INTERFACE
0	D 2.2.2.2	00:30:4F:1B:B3:D9	ether2
1	D 10.5.7.242	00:A0:24:9D:52:A4	ether1
2	10.10.10.10	06:21:00:56:00:12	ether2

[admin@AT-WR4562] ip arp>

If static arp entries are used for network security on an interface, you should set arp to 'reply-only' on that interface. Do it under the relevant /interface menu:

[admin@AT-WR4562]		ip	arp> /interface ethernet set ether2 arp=reply-only
[admin@AT-WR4562] ip			arp> print
Flags: X - disabled, I - invalid, H - DHCP, D - dynamic
#	ADDRESS		MAC-ADDRESS	INTERFACE
0	D 10.5.7.242		00:A0:24:9D:52:A4 ether1
1	10.10.10.10		06:21:00:56:00:12 ether2
[admin@AT-WR4562]		ip arp>

5.1.4 Proxy-ARP feature

Description

A router with properly configured proxy ARP feature acts like a transparent ARP proxy between directly connected networks. Consider the following network diagram.