IP-spoofing detections in broadcast domain

[Mikhail_Demin]

On the gateway one of the external interfaces have activated anti-spoofing in detect mode. In tracker i see detections of anti-spoofing but source and destination (gateway external interface) IP-addresses are in the same network (because gateway is satellite in the VPN-community and have a L2 VPN-connection with central office). Why anti-spoofing works in this case? On the attached screenshot external interface with activated anti-spoofing is 10.150.2.6 and network between this gateway and central gateway is 10.150.2.0/28.

[_Val_]

what is the IP address on eth3?

[Mikhail_Demin]

10.150.2.6, but i already resolve this issue. Thanks!

[_Val_]

What was the resolution? In might help other community members in the future, so please share

[Mikhail_Demin]

Address 10.150.2.9 (packets from whose are detected by anti-spoofing module) was in network that was in topology on one of the internal interfaces.