Disable antispoofing for a subnet

[vijayant]

Hi

Is it possible to disable antispoofing for a preticular subnet behind internal interface, letting it remain enabled for rest of the subnets.

[rokudan]

See this Thread: Another weird Anti Spoofing Issue

[MarioL]

vijayant: If you give more details on what you want to achieve it will be a lot easier to healp, what exactly do you mean by "disable antispoofing for a preticular subnet behind internal interface, letting it remain enabled for rest of the subnets?"

[vijayant]

MarioL

I was just curious if this is possible or not.

Scenario:

Let network A, B, C, D be behind Internal Interface. And Antispoofing enabled on Internal and External interfaces. Now to prevent traffic from being blocked by antispoofing we need to creat a Group and add A, B, C, D to that group and mention this in internal interface Topology.
Now I want that traffic from Network C should not be checked for antispoofing. Can we do that..

[chuachongchee]

Originally Posted by vijayant

MarioL

I was just curious if this is possible or not.

Scenario:

Let network A, B, C, D be behind Internal Interface. And Antispoofing enabled on Internal and External interfaces. Now to prevent traffic from being blocked by antispoofing we need to creat a Group and add A, B, C, D to that group and mention this in internal interface Topology.
Now I want that traffic from Network C should not be checked for antispoofing. Can we do that..

Dont think so... antispoof is a simple on and off setting only... put it this way.. can we do an x-ray and look at our lung without looking at our heart which is soo close to it??

Theres no way we can define that in anti-spoof network in the interface to check on x networks and not y networks...

[vijayant]

chuachongchee

thanks !! atleast now i dont have any confusion...

[chuachongchee]

Originally Posted by vijayant

chuachongchee

thanks !! atleast now i dont have any confusion...

hehe... no problems!... took me a while and some problems to think and try it out too...