topic Re: Need a bit urgent help on disabling Antispoofing from mgmt_cli in General Topics

Need a bit urgent help on disabling Antispoofing from mgmt_cli

Blason_R — Fri, 06 Oct 2023 19:22:09 GMT

Hi team,

Unfortunately I am locked out due to wrong antispoofing settings pushed on firewall and unable to connect to mgmt server. However I uninstalled the policy and got a ssh access to mgmt server. I went through API and I guess I can disable antispoofing on eth2 of my cluster but I am unable to construct the entire command.

Can someone please help me on that?

mgmt_cli set cluster-member "cluster-mon" interfaces.update.name "eth2" interfaces.add.anti-spoofing "false"

This is not working.

I even tried disabling using fw ctl set int fw_antispoofing_enabled 0 but still no luck.

TIA

Blason R

Re: Need a bit urgent help on disabling Antispoofing from mgmt_cli

Wolfgang — Fri, 06 Oct 2023 19:31:50 GMT

@Blason_R Please be aware, the shown command does not work for accelerated connections. You have to set additional „fw ctl set int sim_anti_spoofing_enabled 0 -a“ See How to temporarily disable anti-spoofing checks on a Security Gateway using the CLI

Re: Need a bit urgent help on disabling Antispoofing from mgmt_cli

Blason_R — Fri, 06 Oct 2023 19:36:52 GMT

no luck !! I am still seeing in fw ctl zebug that packets are being dropped using ANTISPOOFING.

Re: Need a bit urgent help on disabling Antispoofing from mgmt_cli

Blason_R — Fri, 06 Oct 2023 19:39:00 GMT

Sorry it worked...Thanks a ton