topic Re: How to enable Unicast Reverse Path Forwarding on the external interfaces on FTD and ASA firewall ? in Network Security

How to enable Unicast Reverse Path Forwarding on the external interfaces on FTD and ASA firewall ?

damode — Fri, 21 Feb 2020 16:49:12 GMT

Re: How to enable Unicast Reverse Path Forwarding on the external interfaces on FTD and ASA firewall ?

Francesco Molino — Fri, 15 Feb 2019 04:46:04 GMT

Hi

On ASA, the command is:
ip verify reverse-path interface interface_name

Take a look at this documentation:
https://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/firewall/asa_91_firewall_config/protect_tools.html

For FTD, when you're in the interface config, you should find the ip spoofing parameter under security tab within advanced options.

Re: How to enable Unicast Reverse Path Forwarding on the external interfaces on FTD and ASA firewall ?

damode — Sat, 16 Feb 2019 02:56:48 GMT

Thank you very much for your reply.

I will try it out.

Re: How to enable Unicast Reverse Path Forwarding on the external interfaces on FTD and ASA firewall ?

Francesco Molino — Sat, 16 Feb 2019 04:11:54 GMT

Ok no problem. Let me know when you've tested.

For FTD, this is the procedure when using FMC. If you have FDM, you can use the same command as ASA but you need to use Flexconfig object to push it.