09-04-2015 02:20 PM
How to create an ACL rule to block ICMPv6 traffic in entire Network
Since ICMPV6 multicast are coming from multiple ports and flood the whole network.
It is not easy to configure each and every single port to apply ACL rule.
Below link ACL rule to Block IPv6 make sense in this case. But what about for ICMPV6 with different length.
And I need similar configuration on this to block ICMPV6 Multicast Listener Report.
kindly take note Length are 86, 90, 110, 130 and 150
=======================================
Sample config from Brandon is as follow. And this is to apply this ingress on the affected ports. and ethernet-type is 0x86dd which is IPv6.
Brandon Clay,
entry deny_ipv6{ if { ethernet-type 0x86dd; } then { deny; count ipv6_drop; } }
Other related links....
How to create ACL in EXOS and apply in Ports
https://extremeportal.force.com/ExtrArticleDetail?an=000083345
it is known issue
https://communities.intel.com/thread/48051
How to create an ACL rule to block IPv6 traffic https://extremeportal.force.com/ExtrArticleDetail?an=000083208
lost Network message:ICMPv6 Mulitcast Listener Reporthttps://community.extremenetworks.com/extreme/topics/lost-network-message-icmpv6-mulitcast-listener-...