本地代理ARP（Local Proxy ARP ）

【定义及作用】

本地代理ARP，以网关自身的MAC回应本网段的IP地址的ARP请求，用于二层端口隔离时，同一网段的客户之间能够通信。

 

【实验拓扑】

 

【实验要求】

当在R1上过滤了R6的MAC地址时，R1也能够ping通R6

 

 

【配置方法】

R1&R6

no ip routing

 

R4

int E0/0

ip proxy-arp

ip local-proxy-arp

 

【实验验证】

R4#clear arp-cache

R4#ping 155.1.146.1

 

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 155.1.146.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 20/45/84 ms

R4#ping 155.1.146.6

 

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 155.1.146.6, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 16/40/116 ms

R4#show arp

Protocol Address Age (min) Hardware Addr Type Interface

Internet 155.1.146.1 0  c000.0dd0.0000 ARPA Ethernet0/0

Internet 155.1.146.4 -  c003.0dd0.0000 ARPA Ethernet0/0

Internet 155.1.146.6 0 c005.0f80.0000 ARPA Ethernet0/0

 

从R4到R1与R6的MAC地址都变成了R4的MAC地址，因此即使在R1上过滤R6的MAC地址，R1与R6依然能够ping通，原因是R1认为到R6的MAC地址为R4 E0/0的接口地址，实验无法配置过滤因此只能通过show arp 来查看MAC地址是否相同

 

【实验基本配置】

R1:

inter fa 0/0

ip address 155.1.146.1 255.255.255.0

no shut

R4:

inter ethernet 0/0

ip address 155.1.146.4 255.255.255.0

no shut

!

interface Serial 0/0

encaps frame-relay

no frame-relay inverse

ip address 155.1.0.4 255.255.255.0

frame map ip 155.1.0.5 405 broad

no shutdown

R5:

interface Serial 0/0

encaps frame-relay

no frame-relay inverse

ip address 155.1.0.5 255.255.255.0

frame map ip 155.1.0.4 504 broad

no shut

R6:

inter gig 0/0

ip address 155.1.146.6 255.255.255.0

no shut

本文转自zcm8483 51CTO博客，原文链接:http://blog.51cto.com/haolun/993134