 |
 |
On Dec 22, 2011, at 9:01 PM, Doug McIntyre wrote: > mac address limiting to tiny numbers, especially qty 1 won't work. > There are a lot of administrative packets that go across a link coming > from specific well-known MAC addresses, if that administrative packet > gets in before any real traffic, that administrative MAC address will > be learned and real traffic locked out. > > (this is mentioned in the JunOS documentation). > That's why you get those 'administrative packets' to not happen in the first place. No offense, but I don't want to see your cdp/lldp, ospf, stp, keepalives, etc. coming across the IX. On an IX, realistically, we should only be seeing one router/mac address per port, and only IP traffic from said router. AMSIX has a good guide on how to make your devices be quiet for most platforms, here: http://www.ams-ix.net/config-guide/ Now, I could see making exceptions for devices which don't seem to have a way to be quiet, but in 99% of the cases here, a few lines of config can avoid this problem. -- Andrew Hoyos [log in to unmask] ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1