On 26/01/2017 16:08, Saku Ytti wrote:
On 26 January 2017 at 13:54, Phil Mayers <[email protected]> wrote:
Hey,
Worth noting that CoPP on sup720 is done in software for multicast and
broadcast. I assume it'll come before MLD processing so would stop the
queries arriving and thus replies being sent, but worth testing.
Although this is not the use-case OP has, we have tried and failed to
protect a sup720 from an MLD storm with CoPP. The puny CPU and software CoPP
just didn't help.
If you do not allow MCAST on CoPP, you will software process. If you
allow MCAST in CoPP and MLS rate-limit, you can drop them in HW.
Box-wide though, right? No way to only do this on the IXP interface with
MLS RL.
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
