But then the traffic would also be filtered out as in enters the VLAN... I still need the traffic to pass through the trunk links to the edge aggregation switches at each site. I just need to keep it from hitting the RP.
Unless I'm confused about where VACLs apply filtering... On 2011-01-19, at 12:23 PM, Max Pierson wrote: > VACL's should do the trick for you here. If you know the value of the > Ethertype frame, you should still be able to filter on it even though it's > proprietary. If you don't, time to break out the shark! I would start off by > trying to filter based on ethertype since that won't be common to any other > traffic on the wire. > > Max > > On Wed, Jan 19, 2011 at 1:54 PM, Devin Kinch <[email protected]> wrote: > I have a network running two 6509's with VSS in the core of the network. > Several of the attached VLANs are used by an application that transmits audio > with a non-IP based layer 2 multicast (016b.68xx.xxxx or something like that) > stream. It uses many different destination MAC addresses and the frames have > their own vendor proprietary Ethertype. We also need layer 3 routing in the > same VLANs to manage these devices. > > The issue I have is that all these layer 2 multicasts are causing the CPU > usage on the Sup to hover at around 70-80%. It isn't causing any noticeable > impact to the network today, but it may impact future scalability. I've > tried using CoPP (which doesn't support L2 filtering)... is there an obvious, > elegant way of filtering this traffic from hitting the RP, while still > forwarding at layer 2? Perhaps static MAC entries? > > > Devin Kinch > _______________________________________________ > cisco-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/ > _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
