04-28-2013 09:43 PM
I'd like to terminate VPN's on lookback addresses from my public range.
If my public interface is 1.1.1.1/24 and I want to terminate VPN's on .2 and .3 I create two loopback interfaces (place them in the Internet Zone) with the IP addresses of 1.1.1.2 and 1.1.1.3.
Should their subnets be /24 or /32? (I've see examples here that show it configured as /24 and as /32 - in both cases identical to, or part of the L3 subnet)
Is there an ARP implication with each selection?
That is, If I use 1.1.1.2/32 do I need to route the address to the PA or will it proxy ARP for it on my public interface?
04-29-2013 01:17 AM
OK, just reviewed training notes and found loopbacks must be 32 bit addresses masks.
So I just need to know if the is any automagic ARP if the address is contained within the subnet of a L3 interface.
06-07-2013 12:27 PM
The PA will certainly respond to arp requests for addresses assigned to loopback interfaces. Automagically.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
