lost Network message:ICMPv6 Mulitcast Listener Report

  • 0
  • 2
  • Problem
  • Updated 3 years ago
  • Solved
I have my network switches extreme, during the day I have lost network, making a sniffer with wireshark I see many messages ICMPv6 (see attached), that can cause this?

regards

Photo of JHONN WILLIAM BEJAR ANTEZANA

Posted 4 years ago

  • 0
  • 2
Photo of Jason Parker

Jason Parker, Employee

  • 3,038 Points 3k badge 2x thumb
You can set a basic policy to block this traffic if you are not using IPv6.

set policy profile 100 name BlockIPV6

set policy rule 100  ether 0x86dd mask 16 drop

set policy port *.*.* 100

*.*.* is all ports

BTW, you will get a error that you cannot set this on a LAG ports
It is FAD
Photo of Paul

Paul

  • 2,026 Points 2k badge 2x thumb
Hi Jason,

Please share document guide for set policy 
I cannot find set policy command in EXOS. Is it hardware or software limitation?
Can i apply it on Summit Series X250, X440, X450, BD8000

EXOS_Concepts_Guide_15_4
EXOS_Command_Reference_15_7

Appreciate your help. 
Photo of Brandon Clay

Brandon Clay, Escalation Support Engineer

  • 13,606 Points 10k badge 2x thumb
In EXOS, you can create an ACL to accomplish the same thing. In this case, an example policy file is below:

entry deny_ipv6{
    if {
        ethernet-type 0x86dd;
    } then {
        deny;
        count ipv6_drop;
    }
}
Then, apply this ingress on the affected ports. The process for creating the policy file and applying it is shown the the GTAC Knowledge article below:

https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-create-and-apply-an-ACL-in-EXOS

-Brandon

Edit: Fixed an incorrect match condition.
(Edited)
Photo of Paul

Paul

  • 2,026 Points 2k badge 2x thumb
Hi Brandon,

In my case ICMPv6 Length are 110 and 90.


Appreciate your help.

Photo of Paul

Paul

  • 2,026 Points 2k badge 2x thumb
Hi Brandon,

For ICMPv6 Length are 110 and 90.

Can i use as follow?

ethernet-type 0x86dd;
ethernet-type 0x90dd;
ethernet-type 0x110dd;

Thanks.
Photo of Grosjean, Stephane

Grosjean, Stephane, Employee

  • 13,676 Points 10k badge 2x thumb
Ethertype 0x86dd means IPv6. The length is only for low value of the ethertype (below 1500 decimal).
Photo of Andre K.

Andre K.

  • 356 Points 250 badge 2x thumb
I had this problem once with a specific series of DELL workstations. They did this when going into power save mode. The model in question was DELL Optiplex 780 iirc. If you have those machines in your network try updating them to the latest BIOS and NIC drivers.
Photo of Brandon Clay

Brandon Clay, Escalation Support Engineer

  • 13,606 Points 10k badge 2x thumb
Yes, this is a known issue with some Intel NICs that leads to flooding MLD traffic when the NIC is in power save mode. There should be a driver update available to remedy this issue. More information is on Intel's support forum, linked below.

https://communities.intel.com/thread/48051

-Brandon