> > So we need to use proxy-arp, to get macaddress of host instead tap > > interface. > > > > Do you really need proxy-arp on $external_iface ? > > I though both is needed - but I will retest tomorrow. I re-tested, and it only works if enabled on both sides.