cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Welcome to Cisco Firewalls Community


162
Views
0
Helpful
0
Replies
Highlighted
Beginner

%ASA-2-106016: Deny IP spoof message

Keep seeing this in the Syslog for my Cisco ASA 5506-X:

 

%ASA-2-106016: Deny IP spoof from (::) to XXXX::X:XXXX:d327 on interface inside_3. Repeats 3 times in a row at what seems to be random intervals. 

 

What does this mean? From what I understand, it means that any (::) ip address is being denied ip spoof to the ipv6 address ending in :d327 on my inside_3 interface.

 

Sometimes the same message comes through, but on a different interface (inside_5).

 

How can I address it/make the message stop? Any help would be appreciated. 

 

I should note that I have a static route set on the outside interface to an ipv4 address that is assigned by my ISP. IPv6 isn't even enabled on any of the interfaces, inside or outside.

 

I also have all of the inside interfaces part of a single BVI group and a Site-to-Site VPN connection to our Azure Cloud machines set up and working correctly.