<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-6">
<style id="owaParaStyle">P {
MARGIN-BOTTOM: 0px; MARGIN-TOP: 0px
}
</style>
</head>
<body fPStyle="1" ocsi="0">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">
<p><font color="#1f497d" size="3" face="Calibri">Hi, </font></p>
<p><font color="#1f497d" size="3" face="Calibri">If you have genuine multicast traffic in your network then you can apply Broadcast and multicast limit on the up links.</font></p>
<p>Else stop the cast by ACL.</p>
<p> </p>
<p>Regards</p>
<p><font color="#1f497d" size="3" face="Calibri"> </font></p>
<div>
<p> </p>
<div style="FONT-SIZE: 13px; FONT-FAMILY: Tahoma">
<div><span style="FONT-SIZE: 11pt; FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #5f5f5f">
<p class="MsoNormal" style="MARGIN: 0in 0in 0pt; LINE-HEIGHT: normal"><font size="3"><span><strong>Rajesh Singh, </strong></span></font></p>
<p class="MsoNormal" style="MARGIN: 0in 0in 0pt; LINE-HEIGHT: normal"><font size="3"><span><font color="#000000"> راجيش سنج</font></span></font></p>
<font size="3"><span>
<p class="MsoNormal" style="MARGIN: 0cm 0cm 0pt -2.65pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-INDENT: -1.7pt">
<b><span style="FONT-SIZE: 9pt; FONT-FAMILY: 'Tahoma','sans-serif'; COLOR: #4a545e">Sr. Network Engineer</span></b>,
</p>
<p class="MsoNormal" style="MARGIN: 0cm 0cm 0pt -2.65pt; TEXT-AUTOSPACE: ideograph-numeric; TEXT-INDENT: -1.7pt">
</span></font><span><strong><font size="3"><b><span lang="AR-SA" style="FONT-SIZE: 9pt; FONT-FAMILY: 'Tahoma','sans-serif'; COLOR: #5d6671" dir="rtl">مهندس شبكات أول</span></b><b><span style="FONT-SIZE: 9pt; FONT-FAMILY: 'Tahoma','sans-serif'; COLOR: #5d6671"></span></b></p>
</font></strong></span></span><span style="FONT-SIZE: 11pt; FONT-FAMILY: 'Calibri','sans-serif'; COLOR: #365f91"><span style="FONT-SIZE: 9pt; FONT-FAMILY: 'Franklin Gothic Medium','sans-serif'; COLOR: #7d8082">
<p class="MsoNormal"><b><span style="FONT-SIZE: 9pt; FONT-FAMILY: 'Tahoma','sans-serif'; COLOR: #656065"></span></b><span style="FONT-SIZE: 9pt; FONT-FAMILY: 'Tahoma','sans-serif'; COLOR: #5c6770"></span><span style="FONT-SIZE: 10.5pt; COLOR: black"></span> </p>
</span></span></div>
</div>
</div>
<div style="FONT-SIZE: 16px; FONT-FAMILY: Times New Roman; COLOR: #000000">
<hr tabindex="-1">
<div id="divRpF904582" style="DIRECTION: ltr"><font color="#000000" size="2" face="Tahoma"><b>From:</b> foundry-nsp [foundry-nsp-bounces@puck.nether.net] on behalf of Justin Keery [justin.keery@venus.co.uk]<br>
<b>Sent:</b> Wednesday, November 19, 2014 2:03 PM<br>
<b>To:</b> foundry-nsp@puck.nether.net<br>
<b>Subject:</b> [f-nsp] ANY IDEAS - IP6 multicast traffic causing severe CPU load issue (on ICX)<br>
</font><br>
</div>
<div></div>
<div>
<div dir="ltr"><br>
Hi folks, any ideas about this?<br>
<br>
The switches affected by this include ICX6540, 6610 and 6650 all of which were involved in transporting the VLAN described below.<br>
<br>
IP6 multcast traffic (less than 20Mbit/sec, discovered with wireshark on a mirror port) on VLAN682 was causing >40% CPU load on all switches where this VLAN was configured, even though there is no IP virtual interface in this VLAN. At one point there was a
brief but serious OSPF failure whilst this condition was present. <br>
<br>
With the ingress port shut down the CPU load returned to 1%.<br>
<br>
We tried to disable IP4 and IP6 igmp / mld snooping, this had no effect. We then added a router-interface so we could add an IP6 ACL to filter *all* IP6 traffic - again no effect<br>
<br>
vlan 682 name KARMARAMA_L2_ONEA809159_682 by port<br>
tagged ethe 1/2/1 to 1/2/3<br>
router-interface ve 682<font color="#ff0000"> <- added later so we could implement an ACL</font><br>
multicast disable-igmp-snoop <font color="#ff0000"><- did not help</font><br>
multicast6 disable-mld-snoop <font color="#ff0000"><- did not help</font><br>
<div><br>
</div>
<div><b>We need a way to make sure that IP6 multicasts on a VLAN won't overload the CPU on any switch with that VLAN present - ideally filter that VLAN from the CPU altogether!</b></div>
<div><br>
</div>
<div>Any ideas?</div>
<div><br>
</div>
<div>Thanks</div>
<div><br>
</div>
<div>Justin</div>
<div><br>
</div>
<div><br>
</div>
</div>
</div>
</div>
</div>
<BR>---------------------------------------------------------------------------------------<BR>This
message (including any attachments) is confidential and intended solely for the
person or organization to whom it is addressed. It may contain privileged and
confidential information. If you are not the intended recipient, you should not
copy, distribute or take any action in reliance on it. If you have received this
message in error, please notify us immediately by telephoning or E-mailing the
sender. This footnote also confirms that this E-mail message has been scanned
for the presence of computer
viruses.<BR>---------------------------------------------------------------------------------------<BR><FONT
color=#008000><STRONG>Please consider the environment before printing this
email</STRONG></FONT> <BR>
</body>
</html>