County finance requires Spoof Guard on the treasury overlay so VMs…

Question

County finance requires Spoof Guard on the treasury overlay so VMs cannot spoof MAC or IP addresses. How is that enabled in the NSX GUI?

Accepted Answer

Apply a Spoof Guard segment profile to that finance segment in Networking — Spoof Guard is a name-tag checker at the segment door: only the MAC/IP NSX already learned may speak. Stick a Spoof Guard segment profile on the treasury segment in Networking—IDFW, FT, and NAT64 are not that checker.

Answer

Enable identity firewall on the Tier-0 and treat user groups as Spoof Guard

Answer

Turn on vSphere Fault Tolerance for the treasury VMs as the spoofing control

Answer

Create a NAT64 rule on the Edge as the VCTA-NV Spoof Guard method

County finance requires Spoof Guard on the treasury overlay so VMs cannot spoof MAC or IP addresses. How is that enabled in the NSX GUI?

Short Explanation

Full Explanation