https://community.cisco.com/t5/network-security/ddos-network-flood/m-p/4408067#M1081029 <P>If Switches flood arp requests on the entire network , then if we keep pinging an invalid ip address which is supposed to be on the network , then arp frames will be flooded all over the network. Which can cause a DDOS.<BR /><BR /><BR /><STRONG>Why does this occur and how do we prevent this ?</STRONG></P> Tue, 25 May 2021 05:08:15 GMT ojasdillikar4794214 2021-05-25T05:08:15Z https://community.cisco.com/t5/network-security/ddos-network-flood/m-p/4408067#M1081029 <P>If Switches flood arp requests on the entire network , then if we keep pinging an invalid ip address which is supposed to be on the network , then arp frames will be flooded all over the network. Which can cause a DDOS.<BR /><BR /><BR /><STRONG>Why does this occur and how do we prevent this ?</STRONG></P> Tue, 25 May 2021 05:08:15 GMT https://community.cisco.com/t5/network-security/ddos-network-flood/m-p/4408067#M1081029 ojasdillikar4794214 2021-05-25T05:08:15Z https://community.cisco.com/t5/network-security/ddos-network-flood/m-p/4408217#M1081035 <P>what is the model of the switch here,&nbsp; you can have CoPP or ACL as mentioned below :</P> <P>&nbsp;</P> <P><SPAN> <A href="https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-3SY/config_guide/sup6T/15_3_sy_swcg_6T/denial_of_service.pdf" target="_blank">https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-3SY/config_guide/sup6T/15_3_sy_swcg_6T/denial_of_service.pdf</A></SPAN></P> <P>&nbsp;</P> <P>&nbsp;</P> Tue, 25 May 2021 10:16:36 GMT https://community.cisco.com/t5/network-security/ddos-network-flood/m-p/4408217#M1081035 balaji.bandi 2021-05-25T10:16:36Z