What about in the 12.2SR code line? Frank
-----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Tóth András Sent: Thursday, May 05, 2011 8:26 AM To: Phil Mayers Cc: [email protected] Subject: Re: [c-nsp] IPv6 nd table on the 6500 There are improvements made already in the following: CSCtn78957 - High CPU seen with large IPv6 neighbor table Integrated in SXI6 already. Andras On Thu, May 5, 2011 at 9:08 AM, Phil Mayers <[email protected]> wrote: > On 05/05/2011 07:46 AM, Saku Ytti wrote: > >> Speaking of ND entries, they appear to carry significant new DoS vector >> which >> is rather hard to fix and it appears that not even new gear have given it >> much >> thought at all. >> >> > > I saw some IOS roadmap stuff for IPv6 ND DoS protection recently - 2-phase > (1: global "prevent ND DoS", 2: per-interface "Prevent") so Cisco are at > least aware of it. > _______________________________________________ > cisco-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/ > _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
