topic Re: Deny IP spoof from in Network Security

Deny IP spoof from

00u18jg7x27DHjRMh5d7 — Fri, 09 Sep 2022 21:27:55 GMT

I am attempting to configure a BGP connection between Azure and our network. After completing the configuration on both sides I am getting the following error.

%FTD-2-106016: Deny IP spoof from (10.X.X.X) to 192.X.X.X on interface outside

It is blocking the BGP from connecting the SPOOF is the Peer IP of our Azure connection.

Anyone have a fix for this? Or know what I should look at to resolve this issue.

The Firewall is a FirePower 1140 FTD we are not using FMC.

Thanks

Re: Deny IP spoof from

MHM Cisco World — Fri, 09 Sep 2022 21:47:54 GMT

may be you can try disable uRPF ?

Re: Deny IP spoof from

00u18jg7x27DHjRMh5d7 — Mon, 12 Sep 2022 13:17:29 GMT

I will give it a shot see if it help and get back with an update.

Re: Deny IP spoof from

Rob Ingram — Mon, 12 Sep 2022 13:28:28 GMT

@00u18jg7x27DHjRMh5d7 uRPF might well be enabled and dropping the traffic, but doesn't mean it should be disabled - uRPF is enabled to protect the FTD from spoofing attacks. Check your routing tables.