AnsweredAssumed Answered

Disable "Local interface address spoofing"

Question asked by a03cee7c-f56a-4f1b-8784-387839519964 on Nov 7, 2018
Latest reply on Nov 7, 2018 by a03cee7c-f56a-4f1b-8784-387839519964

Hello,

 

we have a setup, where all the traffic is mirrored to the Checkpoint 5800 (via SPAN port).

Management and mirrored traffic interfaces both have "Anti Spoofing: Disabled",

however, since CP receives mirror of all the traffic (including one from its management interface), logs are filled with

message_info:"Local interface address spoofing" messages

(the MAC address of the mirrored packet is that of the router, not CP device).

 

How can we disable check for "Local interface address spoofing"?

Running R80.20.

Outcomes