Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
N_Shaik96190
Explorer
Jump to solution

Disable Anti Spoofing

Hi Guys,

What is the cli command to disable anti spoofing on individual interfaces.

Thank you in advanced.. !!

0 Kudos
1 Solution

Accepted Solutions
PhoneBoy
Admin
Admin

On a gateway there is only a global option to disable it (not per interface): https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...
You can disable it from the management on an interface using set simple-gateway or set simple-cluster with the relevant options.
See: https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/set-simple-gateway~v1.9%20

View solution in original post

(1)
4 Replies
PhoneBoy
Admin
Admin

On a gateway there is only a global option to disable it (not per interface): https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...
You can disable it from the management on an interface using set simple-gateway or set simple-cluster with the relevant options.
See: https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/set-simple-gateway~v1.9%20

(1)
N_Shaik96190
Explorer

after the command (fw ctl set int fw_antispoofing_enabled 0) in Gateway I see the below out out (0) but in Smart console GUI still I see on few interfaces antispoofing enabled ( with Prevent and log) on SG

Do we need to override any configuration from smart console, please confirm?

[Expert@CP01-GW01:0]# fw ctl get int fw_antispoofing_enabled
fw_antispoofing_enabled = 0
[Expert@CP01-GW01:0]# 

[Expert@CP01-GW01:0]# fwaccel off
SecureXL device disabled.

0 Kudos
PhoneBoy
Admin
Admin

This kernel variable overrides the Anti-Spoofing settings on the management.
Which means SmartConsole will still show Anti-Spoofing is enabled.

0 Kudos
the_rock
Legend
Legend

You got the right answer from @PhoneBoy 

0 Kudos