Documentation on threshold settings for unknown data plane packets

[matthew.sterling.ctr]

I'm looking for guidance, or documentation, regarding the threshold settings for unknown data plane packets, and packet-in message rate limits. I need verification that unknown data plane packets are punted to the SDN controller.

Thanks!

[Jason Williams]

By unknown data plane, I assume you mean unknown unicast. Traffic is never punted to the APIC controller unless the leaf needs to communicate with the APICs regarding policy. 

For unknown L2 unicast, we have 2 settings in the bridge domain:

Flood - If the ingress leaf does not have the destination mac learned as an endpoint (local or remote to the leaf), then the unicast packet will be flooded to every leaf and every port which carries the bridge domain

Hardware Proxy - If the ingress leaf does not have the destination mac learned as an endpoint, then the leaf will punt the packet to the spines via the Spine anycast mac. Spines contain a global database of all endpoints in the fabric (COOP). If the spines have a match for the destination mac, then it will send the unicast packet to the leaf which is local to the endpoint. 

Jason