On 26 January 2017 at 13:54, Phil Mayers <[email protected]> wrote:
Hey, > Worth noting that CoPP on sup720 is done in software for multicast and > broadcast. I assume it'll come before MLD processing so would stop the > queries arriving and thus replies being sent, but worth testing. > > Although this is not the use-case OP has, we have tried and failed to > protect a sup720 from an MLD storm with CoPP. The puny CPU and software CoPP > just didn't help. If you do not allow MCAST on CoPP, you will software process. If you allow MCAST in CoPP and MLS rate-limit, you can drop them in HW. -- ++ytti _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
