Anti-Spoofing on centrally managed 1535/1555 gateways

[StevePearson]

I'm trying to configure the anti-spoofing on some newly installed Spark 1535 and 1555 gateways. These are all centrally managed so i'd expect to be able to manage this from the topology tab of the gateway object however when I edit the interfaces here and look at the anti-spoofing tab i'm seeing the settings all greyed out. I can see what appear to be the current settings but I can't change anything. I'm also seeing some enabled and some disabled which is strange as all gateways have been built in the same way.

There are no settings on the device directly (device-advanced settings), and nothing in global properties, but it's almost like there is a global setting somewhere on the SMS that is preventing me from changing the anti-spoofing settings on the spark devices.

I've been through the admin guide looking for options but it doesn't mention anything that suggests that there is a global control for this.

Can anyone advise what I'm missing here please?

Thanks, Steve

[the_rock]

Let me try this in the lab on smb object and will update you. I would logically assume for centrally managed, you must be able to do this, for sure.

Andy

[the_rock · Accepted solution]

Just checked in the lab...make sure attached option is set, should work then.

Andy

[StevePearson]

Hi Andy,

Perfect thanks!

This is the first time i've used centrally managed sparks so its been a learning curve! Looks like the anti-spoofing is either on or off with no options for detect/prevent as you get on the bigger gateways, so i'll need to be careful that I don't lock myself out as they are all quite a distance away!

Steve

[the_rock]

Of course, no problem, glad we can help. Yes, Im always careful if making topology changes when accessing fw remotely, because one small mistake can lead to access being lost...

Andy

[StevePearson]

Hi Andy,

Still seeing options greyed out here.

Whilst the Option to enable Antispoofing is now available, the "Don not check packets from" option remains unavailable! (see attached).

Any idea why this would be?

Thanks,

Steve

 

[the_rock · Accepted solution]

I do..its because thats ONLY available for external interface.

Andy

[the_rock]

Hey brother,

Just for the reference, I attached couple of screenshots from my lab and sorry for my drawing skills, they are NON-EXISTANT 🤣

Andy

[Steffen_Appel · Accepted solution]

You have to set manual topology definition.