[c-nsp] ICMP and SUP720

Peter Salanki peter.salanki at bahnhof.net
Wed Nov 23 17:05:50 EST 2005


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Every old (beginning of 21th century) extreme do ICMP in CPU, pretty  
crappy. But ACLs will take care of the problem, but you will have to  
ACL all the ICMP, as it even routes ICMP in CPU.

23 nov 2005 kl. 22.48 skrev Mikael Abrahamsson:

> On Wed, 23 Nov 2005, Elmar K. Bins wrote:
>
>
>> I'm not sure whether I should ask this; maybe it sounds pretty  
>> silly to
>> you: Have you thought about filtering ICMP, at least ICMP traffic  
>> that's
>> destined for the router itself?
>>
>
> ICMP on certain Extreme Networks platforms are handled in slow- 
> path, so
> there isnt much to do about it but to swap hardware.
>
> -- 
> Mikael Abrahamsson    email: swmike at swm.pp.se
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)

iD8DBQFDhOe/iQKhdiFGiogRApCkAJ9IEG8a3UHqk7Ssa1LN+OnSEfT21wCfWEr0
PLefpSxgKFj3tYHwnuvIpQw=
=l6Xd
-----END PGP SIGNATURE-----


More information about the cisco-nsp mailing list