Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
MrDazanaCom
Participant

ISP advance DMZ getting rejected on 1570

Good morning Experts, 

 

When I enable this feature, the WAN port on the 1590 receives the external IP of the modem but my internet stops working because the firewall sees it as an address spoofing. 

 

Normal DMZ would assign me an internal address and that works fine. I want to move away from using the PPPoE client on the firewall all together.  

 

Anyway I can disable this without disabling it globally ?

 

Thanks

 

 

0 Kudos
3 Replies
the_rock
Legend
Legend

I cant sadly confirm this, as I dont have smb to test, but, if its centrally managed, you can do this via network settings on the object, like you would on regular fw. If its locally managed, I remember seeing before command from clish -> set antispoofing

You can tab once you type that and see what options it gives you.

Andy

0 Kudos
Chris_Atkinson
Employee Employee
Employee

Are you able to share some more details of the IP addresses used and the drop traffic log perhaps?

Also which version of software is used with the 1590?

CCSM R77/R80/ELITE
0 Kudos
MrDazanaCom
Participant

Sure thing. My bad, its a 1570 not a 1590

running R81.10.10 (996002993)

 

dmz_advance1.jpgadvance_dmz2_error.jpg

 

After the Advance DMZ is activated, the interface gets the modems ip address

dhcp2.jpg

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events