I have a situation were we have a remote site connected with a ASA 5505 to our ASA 5525-x, then forwording out another tunnel via a 1870 series router. The problem is when it passes through the 5525 in the middle, it blocks the connection as IPSec Spoof Detected. What should I check to resolve this problem. FYI-I am holding off on posting configs because I want to learn where the problem lies, not just fix it.
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations SkipVought on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Cisco ASA IPSec Spoof Detected
- Thread starter tbierl
- Start date
VinceWhirlwind
Technical User
ANti-spoofing basically defines some networks as "internal" and all the rest as "external", and then any "internal" IP address that appears on the external interface is therefore obviously spoofed and must be dropped.
- Status
Similar threads
- Locked
- Question