<div dir="ltr"><div><b><u><br></u></b></div><b><u>Suggestion from Ronald and Rajesh THANKS- more comments below</u></b><div><br></div><div><b>From Ronald:</b> <span style="color:rgb(0,0,255);font-family:Arial,sans-serif;font-size:13px">Take a look at these: </span><a href="http://www.brocade.com/downloads/documents/product_manuals/B_FastIron/FastIron_08000a_MulticastGuide.pdf" target="_blank" style="font-family:Arial,sans-serif;font-size:13px">http://www.brocade.com/downloads/documents/product_manuals/B_FastIron/FastIron_08000a_MulticastGuide.pdf</a><br><div class="gmail_extra"><br></div><div class="gmail_extra"><b>That's definitely better documentation than I've found before, thanks a lot.<br>We did put in commands to disable multicast IGMP (v4) and MLD (v6) snooping.</b></div><div class="gmail_extra"><b>It seems not to have worked - Is there something else we're missing?</b></div><div class="gmail_extra"><br></div></div><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><div><div class="gmail_extra">vlan 682 by port</div></div><div><div class="gmail_extra"> tagged ethe 1/2/1 to 1/2/3</div></div><div><div class="gmail_extra"> multicast disable-igmp-snoop <span style="color:red"><- did not help</span></div></div><div><div class="gmail_extra"> multicast6 disable-mld-snoop <span style="color:red"><- did not help</span></div></div></blockquote><div><div class="gmail_extra"><font color="#ff0000"><br></font></div><div class="gmail_extra"><div><div class="gmail_signature"><div dir="ltr"><div dir="ltr"><div><b>Rajesh: </b>"If you have genuine multicast traffic in your network then you can apply Broadcast and multicast limit on the up links. Else stop the cast by ACL."</div><div><br></div><div>The granularity seems to be that we can't set a limit of less than 64Mbit/sec (traffic is less than that). We tried to block IP6 altogether via ACL - no effect.</div><div><br></div><div><b>Is it possible that we need to remove/rebuild the VLAN or disable/enable the interface before the Multicast or ACL settings will take effect?</b><br></div><div><b><br></b></div><div><b>Is there some way to simply forward the multicast traffic as layer 2 and force the CPU to ignore it, which is what we want!</b></div><div><br></div><div><br></div></div></div></div></div><div class="gmail_quote">On 19 November 2014 12:31, Ronald Esveld <span dir="ltr"><<a href="mailto:ronald.esveld@qi.nl" target="_blank">ronald.esveld@qi.nl</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div lang="EN-US" link="blue" vlink="purple">
<p></p>
<div>
<p class="MsoNormal"><span style="font-size:10pt;font-family:Arial,sans-serif;color:blue">Hi Justin,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:Arial,sans-serif;color:blue"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:Arial,sans-serif;color:blue">Take a look at these:
<a href="http://www.brocade.com/downloads/documents/product_manuals/B_FastIron/FastIron_08000a_MulticastGuide.pdf" target="_blank">
http://www.brocade.com/downloads/documents/product_manuals/B_FastIron/FastIron_08000a_MulticastGuide.pdf</a><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:Arial,sans-serif;color:blue"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:Arial,sans-serif;color:blue">This one helps out.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:Arial,sans-serif;color:blue">Ronald
<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10pt;font-family:Arial,sans-serif;color:blue"><u></u> <u></u></span></p>
<p class="MsoNormal"><b><span lang="NL" style="font-size:10pt;font-family:Tahoma,sans-serif">Van:</span></b><span lang="NL" style="font-size:10pt;font-family:Tahoma,sans-serif"> foundry-nsp [mailto:<a href="mailto:foundry-nsp-bounces@puck.nether.net" target="_blank">foundry-nsp-bounces@puck.nether.net</a>]
<b>Namens </b>Justin Keery<br>
<b>Verzonden:</b> woensdag 19 november 2014 11:04<br>
<b>Aan:</b> <a href="mailto:foundry-nsp@puck.nether.net" target="_blank">foundry-nsp@puck.nether.net</a><br>
<b>Onderwerp:</b> [f-nsp] ANY IDEAS - IP6 multicast traffic causing severe CPU load issue (on ICX)<u></u><u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal"><br>
Hi folks, any ideas about this?<br>
<br>
The switches affected by this include ICX6540, 6610 and 6650 all of which were involved in transporting the VLAN described below.<br>
<br>
IP6 multcast traffic (less than 20Mbit/sec, discovered with wireshark on a mirror port) on VLAN682 was causing >40% CPU load on all switches where this VLAN was configured, even though there is no IP virtual interface in this VLAN. At one point there was a
brief but serious OSPF failure whilst this condition was present. <br>
<br>
With the ingress port shut down the CPU load returned to 1%.<br>
<br>
We tried to disable IP4 and IP6 igmp / mld snooping, this had no effect. We then added a router-interface so we could add an IP6 ACL to filter *all* IP6 traffic - again no effect<br>
<br>
vlan 682 name KARMARAMA_L2_ONEA809159_682 by port<br>
tagged ethe 1/2/1 to 1/2/3<br>
router-interface ve 682<span style="color:red"> <- added later so we could implement an ACL</span><br>
multicast disable-igmp-snoop <span style="color:red"><- did not help</span><br>
multicast6 disable-mld-snoop <span style="color:red"><- did not help</span><u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal"><b>We need a way to make sure that IP6 multicasts on a VLAN won't overload the CPU on any switch with that VLAN present - ideally filter that VLAN from the CPU altogether!</b><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Any ideas?<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Thanks<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Justin<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
</div>
<p></p>
<p><font color="#0000ff"><font face="Arial">Met vriendelijke groet, With kind regards,
</font><br>
<br>
<font face="Arial"><img border="0" alt="http://www.qi.nl" src="cid:image897cd8.JPG@298c29a7.48ac3eb0" width="150" height="58"> </font><br>
</font><font face="Arial"></font></p>
<p><font face="Arial"><font style="color:rgb(0,0,255)">Ronald Esveld</font><font color="#0000ff">
<br>
</font><font style="color:rgb(0,0,255)">senior network engineer</font><font color="#0000ff">
<br>
<br>
<strong>Qi ict</strong><br>
Delftechpark 35-37 <br>
Postbus 402, 2600 AK Delft <br>
</font></font></p>
<br>
<table border="0">
<tbody>
<tr>
<td align="left"><font color="#0000ff" face="Arial">T</font></td>
<td align="left"><font color="#0000ff" face="Arial">:</font></td>
<td align="left"><font face="Arial"><font style="color:rgb(0,0,255)">+31 15 888 0 444</font></font></td>
</tr>
<tr>
<td align="left"><font color="#0000ff" face="Arial">F</font></td>
<td align="left"><font color="#0000ff" face="Arial">:</font></td>
<td align="left"><font color="#0000ff" face="Arial">+31 15 888 0 445</font></td>
</tr>
<tr><td><font style="color:rgb(0,0,255)"></font><font color="#0000ff"></font>
</td></tr><tr>
<td align="left"><font color="#0000ff" face="Arial">E</font></td>
<td align="left"><font color="#0000ff" face="Arial">:</font></td>
<td align="left"><font color="#0000ff" face="Arial"><span style="color:rgb(0,0,255)"><a href="mailto:ronald.esveld@qi.nl" title="Click to send email to Ronald Esveld" style="color:rgb(0,0,255)" target="_blank"><span style="color:rgb(0,0,255)">ronald.esveld@qi.nl</span></a></span></font></td>
</tr>
<tr>
<td align="left"><font color="#0000ff" face="Arial">I</font></td>
<td align="left"><font color="#0000ff" face="Arial">:</font></td>
<td align="left"><font color="#0000ff" face="Arial"><a href="http://www.qi.nl/" target="_blank">http://www.qi.nl</a></font></td>
</tr>
</tbody>
</table>
<p></p>
<p><a href="https://www.qi.nl/actueel/qi-ict-neemt-strategisch-belang-in-inovativ" target="_blank"><font face="Arial">Qi ict neemt strategisch belang in INOVATIV</font></a></p>
<p><br>
</p>
<u></u>
<p></p>
<p></p>
<p></p>
</div>
</blockquote></div><br></div></div></div>