How to block broadcast traffic (SSDP etc)

Question

Hi, I'm looking to block some broadcast traffic on our network as it is running pretty rampant. A packet monitoring app like wireshark shows just how much there is. We are running N2000 switches with a few N4000 switches. I have tried an ACL on one of the N2000 switches like below (This one was to attempt to block SSDP) ip access-list deny-broadcast 10 deny ip any 239.255.255.250 0.0.0.0 exit This has no effect. I tried the following line with the effect of shutting me out of ssh, so I had to serial cable into the switch to disable it: ip access-group deny-broadcast control-plane I am a newbie when it comes to ACLs and would appreciate any pointers. Regards, Jacob

JacobDegeling · Answer

Thanks Daniel, I will check it out. Jacob

JacobDegeling · Answer

Hi Daniel,

I'm not sure Storm Control is what we want. We don't want to shutdown interfaces, or block all multicast/broadcast messages, just particular protocols that seem to be not that important for us.

I think ACLs are the way to go, or perhaps more VLANs, but I'm not sure how to get them (ACLs) working.

Regards,

Jacob

Networking General

Was this post helpful?