Need a bit urgent help on disabling Antispoofing from mgmt_cli

[Blason_R]

Hi team,

Unfortunately I am locked out due to wrong antispoofing settings pushed on firewall and unable to connect to mgmt server. However I uninstalled the policy and got a ssh access to mgmt server. I went through API and I guess I can disable antispoofing on eth2 of my cluster but I am unable to construct the entire command.

Can someone please help me on that?

mgmt_cli set cluster-member "cluster-mon"  interfaces.update.name "eth2" interfaces.add.anti-spoofing "false"

This is not working.

I even tried disabling using fw  ctl  set  int  fw_antispoofing_enabled  0 but still no luck.

TIA

Blason R

[Wolfgang · Accepted solution]

@Blason_R  Please be aware, the shown command does not work for accelerated connections. You have to set additional „fw ctl set int sim_anti_spoofing_enabled 0 -a“ See How to temporarily disable anti-spoofing checks on a Security Gateway using the CLI 

[Blason_R]

no luck !! I am still seeing in fw ctl zebug that packets are being dropped using ANTISPOOFING.

[Blason_R]

Sorry it worked...Thanks a ton