through the 172 phony router we have setup on the control node. This
is silly to do for local traffic, but getting XEN guests to not do it,
turned into a pit that I didn't want to enter. We want this so that
arplockdown works properly; the mac address is really the client not a
router. Revisit later.