Re: ICMP Query!!!

Exactly!

"The vast majority of packets handled by a router travel through the router
by way of the forwarding plane, or data plane. However, the system's route
processor must handle certain packets, such as routing protocols,
keepalives, packets destined to the local IP addresses of the router, and
packets from management protocols and other interactive access protocols,
such as Telnet and Secure Shell (SSH) Protocol. In addition, packets from
protocols such as Internet Control Message Protocol (ICMP), with IP options,
and others, might require handling by the route processor as well. This type
of traffic is often referred to as control plane traffic."

This is the same reason why using NBAR for ICMP classification when
configuring COPP does NOT work. You need to use an ACL in a class-map to
perform such classification. Very expensive lesson for me ;-)

ICMP terminating on a router, is indeed Control Plane traffic.

Sadiq

On Sat, Nov 13, 2010 at 8:30 PM, ron wilkerson <ron.wilkerson_at_gmail.com>wrote:

>
> http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6642/prod_white_paper0900aecd805ffde8.html
>
> read the 4th paragraph.
>
> On Sat, Nov 13, 2010 at 3:24 PM, Tyson Scott
> <tyson.scott_at_advtechracks.com>wrote:
>
> > ICMP is not control plane traffic. ICMP unreachables go to the CEF
> > exception for example. Consider the control plane as protocols that
> > glue the network together. ICMP traffic to the router go to the host
> > control plane because of being directed to the device thus it must
> > handle it. ICMP is data traffic that may be used for management
> > purposes
> >
> > Regards,
> >
> > Tyson Scott
> > CCIE # 13513 (R&amp;S, Security, SP)
> > Managing Partner/Technical Instructor - IPexpert Inc.
> > tscott_at_ipexpert.com
> >
> >
> > ----- Reply message -----
> > From: "Paul Negron" <negron.paul_at_gmail.com>
> > Date: Sat, Nov 13, 2010 2:10 pm
> > Subject: ICMP Query!!!
> > To: "ron.wilkerson_at_gmail.com" <ron.wilkerson_at_gmail.com>, "Carlos G
> > Mendioroz" <tron_at_huapi.ba.ar>
> > Cc: "CCIE KID" <eliteccie_at_gmail.com>, "Cisco certification"
> > <ccielab_at_groupstudy.com>
> >
> >
> > Very Interesting Response.
> >
> > I guess I primarily viewed ICMP as testing the Control Plane/ Data Plane
> > with the Majority of ICMP Query types:
> >
> > * 0 = Echo Reply (3ping response2)
> > * 8 = Echo Request (3ping query2)
> > * 9 = Router Advertisement (RFC 1256)
> > * 10 = Router Solicitation (RFC 1256)
> > * 13 = Time Stamp Request
> > * 14 = Time Stamp Reply
> > * 17 = Address Mask Request
> > * 18 = Address Mask Reply
> >
> > I know my definition is a little Narrow but it does help differentiate
> ICMP
> > from protocols like RSVP, PIM, EIGRP that strictly represent Control
> Plane
> > from a Routing Switching perspective.
> >
> > As far as the view that because ICMP uses the CPU being a CLEAR
> definition,
> > this I would disagree with. What would Process Switching be then? Control
> > Plane or Data Plane activity?
> >
> > Carlos and Ron do make a good point to expand my Narrow definition
> though.
> > :-)
> >
> > Paul
> >
> >
> > --
> > Paul Negron
> > CCIE# 14856 CCSI# 22752
> > Senior Technical Instructor
> > www.micronicstraining.com
> >
> >
> >
> > > From: <ron.wilkerson_at_gmail.com>
> > > Reply-To: <ron.wilkerson_at_gmail.com>
> > > Date: Fri, 12 Nov 2010 23:58:17 +0000
> > > To: Paul Negron <negron.paul_at_gmail.com>, Carlos G Mendioroz <
> > tron_at_huapi.ba.ar>
> > > Cc: CCIE KID <eliteccie_at_gmail.com>, Cisco certification
> > > <ccielab_at_groupstudy.com>
> > > Subject: Re: ICMP Query!!!
> > >
> > > Agree with carlos...
> > > I've always thought of control plane as anything that the cpu has to
> look
> > at.
> > > Some icmp packets require the cpu, so I'd classify those icmp as
> control
> > plane
> > > packets.
> > >
> > >
> > > Sent from my Verizon Wireless BlackBerry
> > >
> > > -----Original Message-----
> > > From: Paul Negron <negron.paul_at_gmail.com>
> > > Sender: nobody_at_groupstudy.com
> > > Date: Fri, 12 Nov 2010 16:39:10
> > > To: Carlos G Mendioroz<tron_at_huapi.ba.ar>
> > > Reply-To: Paul Negron <negron.paul_at_gmail.com>
> > > Cc: CCIE KID<eliteccie_at_gmail.com>; Cisco certification<
> > ccielab_at_groupstudy.com>
> > > Subject: Re: ICMP Query!!!
> > >
> > > It is true that they help convey information or make sure a path is
> clear
> > to
> > > send larger packets, but ICMP is not intended to help create state
> within
> > > the control plane.
> > >
> > > Like I said....
> > >
> > >
> > > IGMP helps to create a path in which Traffic will use.
> > > ICMP uses the data plane that a control plane protocol created.
> > >
> > > Does anyone else have anything useful to contribute?
> > >
> > > I would always love to hear another explanantion that can be useful and
> > I'm
> > > sure CCIE KID would too, unless the "KID" already gets it.
> > >
> > >
> > > Narbik?
> > >
> > >
> > > --
> > > Paul Negron
> > > CCIE# 14856 CCSI# 22752
> > > Senior Technical Instructor
> > > www.micronicstraining.com
> > >
> > >
> > >
> > >> From: Carlos G Mendioroz <tron_at_huapi.ba.ar>
> > >> Date: Fri, 12 Nov 2010 17:39:56 -0300
> > >> To: Paul Negron <negron.paul_at_gmail.com>
> > >> Cc: CCIE KID <eliteccie_at_gmail.com>, Cisco certification
> > >> <ccielab_at_groupstudy.com>
> > >> Subject: Re: ICMP Query!!!
> > >>
> > >> I would call ICMP redirect packets a control thing though.
> > >> And when using ICMP probes (echo request/reply) as part of a IP SLA
> > >> construct, they are a control thing too.
> > >> What about packet too big ?
> > >>
> > >> In fact, Internet Control Message Protocol sounds a lot to control :)
> > >>
> > >> -Carlos
> > >>
> > >> Paul Negron @ 10/11/2010 14:21 -0300 dixit:
> > >>> I apologize, I meant to state:
> > >>>
> > >>>> IGMP packets are used to create state on the Router that receives
> > them.
> > >>>> Since it is used to create state, it is a part of the Control Plane
> > >>>> process.
> > >>>> It joins so that trees can be built, Although it is PIM that builds
> > them.
> > >>>>
> > >>>> ICMP is generating traffic and is not associated with building
> > ANYTHING. It
> > >>>> is considered Data Plane traffic. It uses paths that have already
> been
> > >>>> setup
> > >>>> by a Control Plane Protocol, like OSPF or EIGRP or PIM for that
> > matter.
> > >>>
> > >>> I accidentally stated ICMP twice.
> > >>>
> > >>> Paul
> > >>
> > >> --
> > >> Carlos G Mendioroz <tron_at_huapi.ba.ar> LW7 EQI Argentina
> > >
> > >
> > > Blogs and organic groups at http://www.ccie.net
> > >
> > > _______________________________________________________________________
> > > Subscription information may be found at:
> > > http://www.groupstudy.com/list/CCIELab.html
> >
> >
> > Blogs and organic groups at http://www.ccie.net
> >
> > _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
> >
>
>
>
> --
> stop talking
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
>

-- 
CCIEx2 (R&S|Sec) #19963
Blogs and organic groups at http://www.ccie.net