
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">

<html>

<head>

<meta http-equiv="Content-Type" content="text/xhtml; charset=utf-8">

</head>

<body>

<div style="font-family:sans-serif"><div style="white-space:normal"><p dir="auto">Hi Nick,</p>

<p dir="auto">does</p>

<blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px"><p dir="auto">show ipv6 | include host drop cam</p>

</blockquote><p dir="auto">(config)#ipv6 max-host-drop-cam 256</p>

<p dir="auto">resolve this issue?</p>

<p dir="auto">Doc says:<br>

To limit the usage of CAM by IPV6 hosts with unresolved ND, enter the ipv6 max-host-drop-cam <br>

command.</p>

<p dir="auto">Jörg</p>

<br><p dir="auto">On 16 Feb 2019, at 20:42, nick@ramnode.com wrote:</p>

</div>

<blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px"><div id="0517BC2B-610D-477E-A1D7-1696C432704C"><div lang="EN-US" link="#0563C1" vlink="#954F72"><div style="page:WordSection1"><p style='font-family:"Calibri", sans-serif; font-size:11pt; margin:0; margin-bottom:0.0001pt'>Hello,</p><p style='font-family:"Calibri", sans-serif; font-size:11pt; margin:0; margin-bottom:0.0001pt'> </p><p style='font-family:"Calibri", sans-serif; font-size:11pt; margin:0; margin-bottom:0.0001pt'>We sometimes encounter neighbor cache exhaustion attacks on our network. A remote IP beings scanning large portions of our customer IPv6 ranges, the IPv6 neighbor table on our router (MLX/XMR) fills up with INCOMP status entries, and connectivity remains impacted until the neighbor table is manually cleared.</p><p style='font-family:"Calibri", sans-serif; font-size:11pt; margin:0; margin-bottom:0.0001pt'> </p><p style='font-family:"Calibri", sans-serif; font-size:11pt; margin:0; margin-bottom:0.0001pt'>What settings should we use to prevent the table from filling up with and maintaining so many INCOMP entries?</p><p style='font-family:"Calibri", sans-serif; font-size:11pt; margin:0; margin-bottom:0.0001pt; background:white; mso-margin-bottom-alt:auto; mso-margin-top-alt:auto'><span style='font-size:9.0pt;font-family:"Calibri Light",sans-serif;color:#1F497D'>Regards,</span><span style='font-size:9.5pt;font-family:"Arial",sans-serif;color:#500050'></span></p><p style='font-family:"Calibri", sans-serif; font-size:11pt; margin:0; margin-bottom:0.0001pt; background:white; mso-margin-bottom-alt:auto; mso-margin-top-alt:auto'><span style='font-size:9.0pt;font-family:"Calibri Light",sans-serif;color:#1F497D'>Nick</span></p></div></div></div></blockquote>

<div style="white-space:normal"><blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px">

</blockquote><blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px"><p dir="auto">_______________________________________________<br>

foundry-nsp mailing list<br>

foundry-nsp@puck.nether.net<br>

<a href="http://puck.nether.net/mailman/listinfo/foundry-nsp" style="color:#777">http://puck.nether.net/mailman/listinfo/foundry-nsp</a></p>

</blockquote></div>

</div>

</body>

</html>