ASA Anti-Spoofing

[richardwiseman]

Can someone please tell me the full ip ranges that are blocked by enabling anti-spoofing on an interface.

I am expecting it to be 0.0.0.0/8, 10.0.0.0/8, 169.254.0.0/16, 172.16.0.0/12, 192.168.0.0/16.

Regards

Richard

[varrao]

the ASA doesn't block any ip addresses on enabling anti-spoofing, it just does unicast reverse path failure checks.

You can refer this:

http://www.cisco.com/en/US/partner/docs/security/asa/asa84/command/reference/i3.html#wp1915749

Thanks,

Varun

[richardwiseman]

Hi Varun

Sorry but that link does not work

Regards

[varrao · Accepted solution]

Sorry about that:

http://www.cisco.com/en/US/customer/docs/security/asa/asa84/command/reference/i3.html#wp1915749

Try now

Varun

[richardwiseman]

Hi Varun,

Still did not work, but managed to get a similar doc open.

Thanks

[varrao]

I'll try again