%ASA-2-106016: Deny IP spoof message

mark.bell — Fri, 21 Feb 2020 17:25:06 GMT

Keep seeing this in the Syslog for my Cisco ASA 5506-X:

%ASA-2-106016: Deny IP spoof from (::) to XXXX::X:XXXX:d327 on interface inside_3. Repeats 3 times in a row at what seems to be random intervals.

What does this mean? From what I understand, it means that any (::) ip address is being denied ip spoof to the ipv6 address ending in :d327 on my inside_3 interface.

Sometimes the same message comes through, but on a different interface (inside_5).

How can I address it/make the message stop? Any help would be appreciated.

I should note that I have a static route set on the outside interface to an ipv4 address that is assigned by my ISP. IPv6 isn't even enabled on any of the interfaces, inside or outside.

I also have all of the inside interfaces part of a single BVI group and a Site-to-Site VPN connection to our Azure Cloud machines set up and working correctly.

topic %ASA-2-106016: Deny IP spoof message in Network Security

%ASA-2-106016: Deny IP spoof message