how can I stop my sonicwall TZ-210 (SonicOS Enhanced 5.5.1.0-5o) from responding to arp queries on the wan subnet?

Posted by IsaacB on Server Fault See other posts from Server Fault or by IsaacB
Published on 2011-07-27T23:03:38Z Indexed on 2013/10/25 3:58 UTC
Read the original article Hit count: 423

Filed under:

sonicwall

|

arp

My sonicwall TZ-210 is answering arp queries on the wan subnet (which my isp doesn't like), basically mapping all the wan ips to its own mac address, causing network havoc since it is not set to route those back to the main isp gateway.

How the heck can I turn this behavior off? I have already entered in all wan subnet ips in the static arp cache and left them 'unpublished' which I presumed would mean that it did not bother answering arp queries for them. Apparently it did not do the trick. Arp queries are still being answered unfortunately.

What can I do? Any suggestions?

© Server Fault or respective owner

Related posts about sonicwall

Tunnel into Sonicwall VPN while on Sonicwall wifi?

as seen on Server Fault - Search for 'Server Fault'
Hey all, I am able to hit my company's VPN while I am at home using a dedicated IP with no issue. When I am at work, the VPN we use (a Sonicwall router/VPN/wifi access point), I can get outside internet fine, but am unable to connect to the VPN. I know that the wifi puts me on a different subnet… >>> More
Connect iPhone to Sonicwall VPN

as seen on Super User - Search for 'Super User'
Is there any way to connect an iPhone to a Sonicwall VPN? The specific model is Sonicwall TZ180 Standard, running SonicOS Standard 3.8.0.1-27s. Thank you. >>> More
Snow Leopard and SonicWall NetExtender VPN?

as seen on Super User - Search for 'Super User'
I recently upgraded from Leopard to Snow Leopard, and now I'm having strange issues with a previously working NetExtender. After debugging a "can't read/execute /etc/ppp/peers" problem (since /etc/ppp didn't exist) and following the advice on the Apple support forums (I tried a clean install, and… >>> More
Sonicwall NSA 240 or Netgear ProSecure UTM 25

as seen on Server Fault - Search for 'Server Fault'
Hi! I'm about to buy a new firewall and I’m choosing between a Sonicwall NSA 240 and a Netgear ProSecure UTM 25. I have already done research for which kind of firewall I need and limit it to these two, now I just have to choose between them. But what I don’t know is which one of them is easiest… >>> More
Sonicwall TZ 210 Enhanced OS - Allow Wireless to talk VPN

as seen on Server Fault - Search for 'Server Fault'
Does anyone know how to allow the WLAN access to talk to a VPN subnet that is set up on a Sonicwall TZ 210 Enhanced? I got the WLAN (192.168.2.X) talking to the LAN (192.168.1.X), but I also need to the WLAN to talk to the VPN (192.168.3.X) Thanks! >>> More

Related posts about arp

Dynamic ARP Entries turning into Static ARP entries

as seen on Server Fault - Search for 'Server Fault'
I recently acquired a client that has a strange ARP caching issue on one of thier servers. I have a server that will eventually start turning it's dynamic ARP entries into static ARP entries. This causes problems because when the machine that has a static ARP entries on this server receives a new… >>> More
Add static ARP entries when network is brought up

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I have some pretty dumb IP devices on a subnet with my Ubuntu server, and the server receives streaming data from each device. I have run into a problem in that when an ARP request is issued to the device while it is streaming data to the server, the request is ignored, the cache entry times out and… >>> More
What does it mean when ARP shows <incomplete> on eth1

as seen on Server Fault - Search for 'Server Fault'
We have been using HAProxy along with heartbeat from the Linux-HA project. We are using two linux instances to provide a failover. Each server has with their own public IP and a single IP which is shared between the two using a virtual interface (eth1:1) at IP: 69.59.196.211 The virtual interface… >>> More
Programmatic use of ARP

as seen on Stack Overflow - Search for 'Stack Overflow'
I have a need for some C or C++ code, compilable under Linux, to be able to take a list of IP addresses of some arbitrary number of remote hosts machines and obtain a ethernet MAC address for each one. These host machines may be on the same subnet or they could be on a different subnet behind a router… >>> More
VMXNET3 nic loses the ability to update ARP table after N hours

as seen on Server Fault - Search for 'Server Fault'
I have a fedora 18 VM that stops updating the arp table on eth1 after running for a number of hours to days. There are other VMs on the same hypervisor that can access all of the same networks without issue. A tcpdump of the offending NIC shows only ARP broadcasts but no responses. None of the other… >>> More