Unsolved
This post is more than 5 years old
18 Posts
0
4476
August 21st, 2018 06:00
How to block broadcast traffic (SSDP etc)
Hi,
I'm looking to block some broadcast traffic on our network as it is running pretty rampant. A packet monitoring app like wireshark shows just how much there is. We are running N2000 switches with a few N4000 switches. I have tried an ACL on one of the N2000 switches like below (This one was to attempt to block SSDP)
ip access-list deny-broadcast
10 deny ip any 239.255.255.250 0.0.0.0 exit
This has no effect. I tried the following line with the effect of shutting me out of ssh, so I had to serial cable into the switch to disable it:
ip access-group deny-broadcast control-plane
I am a newbie when it comes to ACLs and would appreciate any pointers.
Regards,
Jacob
No Events found!
JacobDegeling
18 Posts
0
August 21st, 2018 23:00
Thanks Daniel,
I will check it out.
Jacob
JacobDegeling
18 Posts
0
August 23rd, 2018 00:00
Hi Daniel,
I'm not sure Storm Control is what we want. We don't want to shutdown interfaces, or block all multicast/broadcast messages, just particular protocols that seem to be not that important for us.
I think ACLs are the way to go, or perhaps more VLANs, but I'm not sure how to get them (ACLs) working.
Regards,
Jacob