ME3600 a lot of mcast-control packets-error

[kzryumov1]

  Hello,

Recently we have began to got a lot of packet-err on one of our ME3600.

#show controllers cpu-interface | include mcast

Queue              packet     jumbo      packet-err jumbo-err  dropped    unfillcnt

-----------------------------------------------------------------------------------

sw forwarding      667        0          0          0          0          0

routing protocol   108719     0          0          0          0          0

icmp               129        116        0          0          0          0

host               321358     21998      0          0          0          0

acl logging        0          0          0          0          0          0

stp                1093107    0          0          0          0          0

l2 protocol        831733     0          0          0          0          0

mcast control      11554446   5459       104951     0          0          0

broadcast          883728     3          0          0          0          0

And with this messages we have got problems with multicast traffic, LDP, OSPF.

What does this errors mean?

Regards,

Konstantin

[Dale Miller]

You have a very high amount of Multicats control traffic being recieved. I imagine you have high CPU and multicast packet drops leading to instability of your routing protocols. What code are you running and can you isolate what interface this traffic is ingressing on?

Thanks,

Dale

[kzryumov1]

Hi Dale,

You are right.

I've found that one of our D-link (access) switches sends a lot of LLMNR protocol multicast packets with DIP 224.0.0.252 DMAC 0100.5e00.00fc. The problem was resolved when I restricted this traffic on D-link.

But there is one interesting thing happens if I try to hit this packets by MAC ACL filter on ME switches.

For example:

mac access-list extended LLMNR_MDNS

deny   any host 0100.5e00.00fb

deny   any host 0100.5e00.00fc

permit any any

!

int range gi0/20 - 22

mac access-group LLMNR_MDNS in

Whatever the packets with these MACs could reach CP of ME.

Jun 17 23:57:47: PKT(rx)[MCAST_CNTRLQ]: : PhyIf: Gi0/22 LogicaIf: Po1, oVlan:1483 L3IF: Vl1483

LT: UNKNOWN(0) tags: 1 vlanEdit: Pop1  DI: 0x8005136 EAID: 0x9150  MacDA: 0100.5e0

0.00fc, MacSA: 902b.3431.7530 Non (IPv4/IPv6/ARP/RARP)

    RX-Nuclear-Header

    [0] = 0xA4100236  [1] = 0x88005136 [2] = 0x00000000 [3] = 0x80ED9100

    [4] = 0x010005CB  [5] = 0x0C1605CB [6] = 0x00109150 [7] = 0x00000000

Jun 17 23:57:47: PKT(rx)[MCAST_CNTRLQ]: : PhyIf: Gi0/22 LogicaIf: Po1, oVlan:1483 L3IF: Vl1483

LT: UNKNOWN(0) tags: 1 vlanEdit: Pop1  DI: 0x8005136 EAID: 0x9150  MacDA: 0100.5e0

0.00fc, MacSA: 902b.3431.7530 Non (IPv4/IPv6/ARP/RARP)

    RX-Nuclear-Header

    [0] = 0xA4100236  [1] = 0x88005136 [2] = 0x00000000 [3] = 0x80ED9100

    [4] = 0x010005CB  [5] = 0x0C1605CB [6] = 0x00109150 [7] = 0x00000000

Jun 17 23:57:47: PKT(rx)[MCAST_CNTRLQ]: : PhyIf: Gi0/22 LogicaIf: Po1, oVlan:1483 L3IF: Vl1483

LT: UNKNOWN(0) tags: 1 vlanEdit: Pop1  DI: 0x8005136 EAID: 0x9150  MacDA: 0100.5e0

0.00fc, MacSA: 902b.3431.7530 Non (IPv4/IPv6/ARP/RARP)

    RX-Nuclear-Header

    [0] = 0xA4100236  [1] = 0x88005136 [2] = 0x00000000 [3] = 0x80ED9100

    [4] = 0x010005CB  [5] = 0x0C1605CB [6] = 0x00109150 [7] = 0x00000000

Does MAC ACL works for multicast traffic?

Regards,

Konstantin