x.x.x.129 router (by the ISP, not under my control)
x.x.x.130 firewall (with proxy_arp)
x.x.x.128/27 my subnet
x.x.x.135 server1
x.x.x.136 server2 etcpp
x.x.y.242 firewalls second ip, different subnet, for ssh access..



x.x.x.129   x.x.x.128/27
    |           |
| vlan 1 |  | vlan 7 |
    |	        |
  bond0	      bond0.7
      \        /
       x.x.x.130



on the firewall:

ip route:

x.x.x.129 dev bond0  scope link 
x.x.y.240/28 dev bond0  proto kernel  scope link  src x.x.y.242
x.x.x.128/27 dev bond0.7  scope link 
default via x.x.y.241 dev bond0 

ip addr:

5: bond0: <BROADCAST,MULTICAST,MASTER,UP,LOWER_UP> mtu 1500 qdisc noqueue 
    link/ether 00:04:23:bf:75:8d brd ff:ff:ff:ff:ff:ff
    inet x.x.y.242/28 brd x.x.y.255 scope global bond0:1
    inet x.x.x.130/27 brd x.x.x.159 scope global bond0
    inet6 fe80::204:23ff:febf:758d/64 scope link 
       valid_lft forever preferred_lft forever

9: bond0.7@bond0: <BROADCAST,MULTICAST,MASTER,UP,LOWER_UP> mtu 1500 qdisc noqueue 
    link/ether 00:04:23:bf:75:8d brd ff:ff:ff:ff:ff:ff
    inet x.x.x.130/32 scope global bond0.7
    inet6 fe80::204:23ff:febf:758d/64 scope link 
       valid_lft forever preferred_lft forever


arp -an

? (x.x.y.241) auf 00:D0:01:F5:C8:00 [ether] auf bond0
? (x.x.x.139) auf <unvollständig> auf bond0.7
? (x.x.x.129) auf 00:D0:01:F5:C8:00 [ether] auf bond0
? (x.x.x.135) auf 00:0A:E4:83:D5:F7 [ether] auf bond0.7