again... no ip unreachable

From: Oliver Ziltener (ziltener@netcloud.ch)
Date: Thu Dec 04 2003 - 16:48:26 GMT-3

• Next message: maozp@sohu.com: "test"
• Previous message: Cristian Henry H: "IGMP filter"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Hello list

in one of the networks presentation (RST-3041 page 54) is written:

Use "no ip unreachables" to prevent denied packets from being sent to the CPU

But this will unfortunately also stop the switch from sending "icmp
unreachable messages" to the source of the request.

Conclusion:
For preventing to bring down the switch cause of high cpu utilisation with
"icmp unreachable", but still answer with the "icmp unreachable"
we can use ONLY "ip icmp rate-limit ...".
Right?

best regards
Oliver

• Next message: maozp@sohu.com: "test"
• Previous message: Cristian Henry H: "IGMP filter"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Sat Jan 03 2004 - 08:25:35 GMT-3