Deny IP due to Land Attack from IP1 to IP1

Unanswered Question
Mar 23rd, 2010
User Badges:


We have from 2 days an error message shown from ASA5520 on syslogserver.

I am troubleshooting in order to find any mac or anything else for source of problem.

It is important to tell that they are two ip from domain controllers which generating this event.


1187441  3/23/2010 09:09 Critical :Mar 23 00:14:34 CEST: %ASA-session-2-106017: Deny IP due to Land Attack from AD1 to AD1

Could you advice me how to localize this error and what is causing it?


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Jennifer Halim Tue, 03/23/2010 - 04:56
User Badges:
  • Cisco Employee,

you might want to check if there is any routing loop in particular for the AD1 ip address. You can also perform a packet capture on the ASA interface to check on that particular packet.


This Discussion

Related Content