Is there any way to use the proxy arp feature of Vyatta on the virtual IP (using either VRRP or Clustering) rather than directly on the physical interface? Or any workarounds to achieve the same function?
Background; I just finished setting up a "drop-in" Vyatta firewall using two interfaces configured with the same /24 network on both sides using Proxy Arp. The Proxy Arp works great when using a single Vyatta box, but in HA using VRRP and/or Clustering, both boxes answer arp requests with different MAC addresses, resulting in some traffic going through the primary box and some through the standby box.
Also, this might create problems with ARP caching if one of vyatta boxes goes down. If the proxy arp feature could be used with the virtual IP instead, then this potential problem wouldn't exist.
Any ideas? Thanks!