Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Prime
Contributor

Need to understand whether route based antispoofing can be configured on any interface.

We have already configured the antispoofing on inside interface in detect mode. Need to understand whether route based antispoofing can be configured on any interface.

 

 

0 Kudos
3 Replies
Chris_Atkinson
Employee
Employee

Topology option: "network defined by routes" ?

What is the scenario or interface type that you are asking about and for which model appliance / version?

More information will help in providing an answer ...

0 Kudos
Blason_R
Advisor

Are you talking about route based VPN? Nope anti spoofing can not be configured on those interfaces.

0 Kudos
the_rock
Legend
Legend

As the guys said, we need little more info. @Blason_R is right, anti spoofing would be disabled by default on VPNT interfaces. Are you possible referring to below? Mine is greyed out as I gave external interface example, but when thats checked, topology is automatically calculated, so even if it changes, no need ti push the policy. You need to have proper routing, of course...sort of goes without saying  : - )

Screenshot_1.png

0 Kudos