how to Deny HOPOPT reverse path check on interface

[dhanikonda]

Dear Sir,

In my ASA i am getting the message is like this

Deny IP spoof from (127.0.0.119) to 108.122.0.0 on interface MZ-ACC

Ofter that i enable IP VERIFY REVERSE-PATH command on the MZ-ACC interface ofter enabling i showing the below msg

106021    127.0.0.254        108.122.0.0        Deny HOPOPT reverse path check from 127.0.0.254 to 108.122.0.0 on interface MZ-ACC

Now how to fix this problem .

Please help me.

Thanks & Regards

Srini

[mickyq]

Hi dhanikonda

I dont know the answer but heres a link to a similar question:

https://supportforums.cisco.com/discussion/11141021/deny-hopopt-reverse-path-check-0000-0000-interface-inside