ASA5505 Deny IP Spoof Syslog Message

Hello,

I am getting the following Syslog Message on our Cisco ASA5505 device:

Deny IP spoof from (0.1.0.4) to 129.6.15.28 on interface inside

I have not been able to figure out exactly where this is coming from. Any ideas?

Thank you,

TMcClarnon
OokLocAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

MikeKaneCommented:
Check all your interfaces, see that the subnets and masks are correct.   is there anything on the management interface ?  

Check the ARP table and see if you can get a mac address from that IP.  

0
OokLocAuthor Commented:
Hello,

I checked all the interfaces, subnets, and masks. There is nothing on the management interface. Also, the ARP table does not show an ip address of 0.1.0.4. We are going to run wireshark and see if we can spot whats causing these critical errors. I'll post what I find.

Thank you,

TMcClarnon
0
OokLocAuthor Commented:
Hello,

We have found the problem. It seems a USB Camera created a new network connection with a description of "Microsoft TV/Video Connection" on one of our machines. This connection had an Autoconfiguration IP Address of 0.1.0.4.  We tried to just right-click and disable it, but the system would not let us because it was using some resource.

So, we opened the TCP/IP properties, then the Advanced TCP/IP settings button, and under the DNS tab we unchecked the box for "Register this connection's addresses in DNS" and rebooted.  The connection was no longer shown. This seems to have solved the issue.

Thank you,

TMcClarnon
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Cisco

From novice to tech pro — start learning today.