[c-nsp] Cat4500 High CPU with Multicast Stream

Phil Mayers p.mayers at imperial.ac.uk
Wed Jul 13 11:52:31 EDT 2011


On 07/13/2011 04:46 PM, Antonio Soares wrote:
> Thanks, I'm feeling better now :)
>
> So in my case, one 4500 with "ip routing" enabled and "ip multicast-routing"
> disabled, what could be simple and quick to implement ?

I'm not familiar with Cat4500 I'm afraid.

On a 6500 I would do this:

ip access-list standard DENY_MULTI
  deny 224.0.0.0 15.255.255.255
int VlanXXX
  ip multicast boundary DENY_MULTI

...it might work on that platform. As others have pointed out, some 
legitimate traffic uses 224.0.0.0/24 e.g. HSRP, VRRP, PIM, OSPF, etc. so 
be careful with this.

Or use a plain access list on the ethernet port.


More information about the cisco-nsp mailing list