[f-nsp] MLX IPv6 NCE

[nick at ramnode.com]

Hello,

 

We sometimes encounter neighbor cache exhaustion attacks on our network. A
remote IP beings scanning large portions of our customer IPv6 ranges, the
IPv6 neighbor table on our router (MLX/XMR) fills up with INCOMP status
entries, and connectivity remains impacted until the neighbor table is
manually cleared.

 

What settings should we use to prevent the table from filling up with and
maintaining so many INCOMP entries?

Regards,

Nick

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/foundry-nsp/attachments/20190216/ce56c2c4/attachment.html>