[c-nsp] ICMP and SUP720

Jakob Perz jakob at perz.com
Wed Nov 23 17:23:54 EST 2005


Hi,

On Wed, 23 Nov 2005, Elmar K. Bins wrote:

> I'm not sure whether I should ask this; maybe it sounds pretty silly
> to you: Have you thought about filtering ICMP, at least ICMP traffic
> that's destined for the router itself?

it's true that extreme handles icmp in slow-path (cpu); on new firmware 
images, however, you can use the "disable icmp access-list" command.
while this won't make all icmp traffic go through the asic, it might 
improve a lot!

jm2c,
jakob


More information about the cisco-nsp mailing list