HP device unicast storming large network

nathansmith · ‎09-09-2002

We are having an issue at certain times of teh night when our HP servers are unicasting packets to the whole network. Can I limit the port the HP is plugged into? It is bringing a 1400 node network to the it's knees..

steve.barlow · ‎09-09-2002

If the server was seperated from the rest of the network by a router, go with QoS traffic shaping (or traffic policing - CAR - if you want traffic dropped).

If the network is flat, depending on the switch type you can go with catalyst QoS policing. See the link: http://www.cisco.com/warp/public/473/102.html

Hope it helps.

Steve

nathansmith · ‎09-11-2002

What modules are required for QoS policying. I am running SUP1As one with the daughter router module. Does the 6509 have to be routing my traffic currently?

steve.barlow · ‎09-11-2002

Here are 2 very good links about QoS and the 6000:

http://www.cisco.com/warp/public/473/152.html (best link)

http://www.cisco.com/warp/public/473/138.html

It lists the HW&SW requirements (they are at a minimum a Sup1 with a PFC) and describes how QoS works in the 6000. No, for the Cat QoS the 6509 doesn't have to be routing the traffic. For the IOS traffic shaping/policing, a router must do it.

And another link to look at:

http://www.cisco.com/warp/public/473/60.html

Steve

nathansmith · ‎09-12-2002

That is such a compicated solution.. What I really would love to know is why X-Windows on port 6000 is sent to every port on the network even with destination and source MAC addresses..

steve.barlow · ‎09-12-2002

Which OS version is it? Reason I ask is it may be a bug. If cam table isn't full (32K of entries) and it is unicast traffic, it shouldn't forward the packets as I am sure you know.

Example of cam bugs on 6000: CSCds71110 & CSCdx46065 & CSCdx29395

How does the cam table look? But traffic is only flooded out ports on same vlan as server, correct? Is it possible to move the server to a new vlan on it's own to test?

Steve

nathansmith · ‎09-12-2002

7.2(2), I checked bugtrack.. We are just using Vlan 1 (one of our problems) and not routing through our 6509's blade as of yet.. I don;t know how to tell if the cam is full, I have stepped through it to make sure that each port is correct, which it is..