On 26/01/17 08:18, Lukas Tribus wrote:
I've been testing workarounds based upon filtering the incoming MLD
query, on a 4500 (Cisco 4948E running 15.1(2)SG) and a 6500 (Cisco
6500 w. SUP720-3B running 15.1(2)SY).
Control Plane Policing is probably the way to address this (in case MLD
cannot be properly disabled, I mean).
Worth noting that CoPP on sup720 is done in software for multicast and
broadcast. I assume it'll come before MLD processing so would stop the
queries arriving and thus replies being sent, but worth testing.
Although this is not the use-case OP has, we have tried and failed to
protect a sup720 from an MLD storm with CoPP. The puny CPU and software
CoPP just didn't help.
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
