Versions from 12.2(33)SRE3 forward (this includes all later T and 15.n images) should not exhibit this behavior.
Andras 2011/5/6 Frank Bulk <[email protected]>: > What about in the 12.2SR code line? > > Frank > > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On Behalf Of Tóth András > Sent: Thursday, May 05, 2011 8:26 AM > To: Phil Mayers > Cc: [email protected] > Subject: Re: [c-nsp] IPv6 nd table on the 6500 > > There are improvements made already in the following: > CSCtn78957 - High CPU seen with large IPv6 neighbor table > > Integrated in SXI6 already. > > Andras > > > On Thu, May 5, 2011 at 9:08 AM, Phil Mayers <[email protected]> wrote: >> On 05/05/2011 07:46 AM, Saku Ytti wrote: >> >>> Speaking of ND entries, they appear to carry significant new DoS vector >>> which >>> is rather hard to fix and it appears that not even new gear have given it >>> much >>> thought at all. >>> >>> >> >> I saw some IOS roadmap stuff for IPv6 ND DoS protection recently - 2-phase >> (1: global "prevent ND DoS", 2: per-interface "Prevent") so Cisco are at >> least aware of it. >> _______________________________________________ >> cisco-nsp mailing list [email protected] >> https://puck.nether.net/mailman/listinfo/cisco-nsp >> archive at http://puck.nether.net/pipermail/cisco-nsp/ >> > > _______________________________________________ > cisco-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/ > > _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
