ivanpsh
commented
10 years ago With the data available I was not able to find the source of the problem, but have contacted DB and their answer was:
Hi Ivan,
thanks much for the reply and especially config. Please apply following :
! interface Vlan3299 no ip pim sparse-mode !
As there is no multicast on this channel you can remove it and it should fix our problem.
Thanks in advance. Peter DBS Netops
Hi Ivan, I hope you are all well. Please have a look at the warning issued by DB, investigate and let me know what causes this!
Thanks.
MK
Greetings,
We are receiving access-list violations associated with proximity circuit 382842 vlan 3299, which is configured for QCMDU.
The violations we see are: Jul 30 06:04:47.407 CEST: %SEC-6-IPACCESSLOGRP: list allow_trading_A denied igmp 10.20.5.202 (GigabitEthernet3/12.3299 0023.ebfd.577f) -> 224.0.0.1, 5 packets Jul 30 06:09:47.410 CEST: %SEC-6-IPACCESSLOGRP: list allow_trading_A denied pim 10.20.5.202 (GigabitEthernet3/12.3299 0023.ebfd.577f) -> 224.0.0.13, 10 packets Jul 30 06:09:47.410 CEST: %SEC-6-IPACCESSLOGRP: list allow_trading_A denied igmp 10.20.5.202 (GigabitEthernet3/12.3299 0023.ebfd.577f) -> 224.0.0.1, 5 packets Jul 30 06:14:47.414 CEST: %SEC-6-IPACCESSLOGRP: list allow_trading_A denied pim 10.20.5.202 (GigabitEthernet3/12.3299 0023.ebfd.577f) -> 224.0.0.13, 11 packets Jul 30 06:14:47.414 CEST: %SEC-6-IPACCESSLOGRP: list allow_trading_A denied igmp 10.20.5.202 (GigabitEthernet3/12.3299 0023.ebfd.577f) -> 224.0.0.1, 5 packets Jul 30 06:19:47.418 CEST: %SEC-6-IPACCESSLOGRP: list allow_trading_A denied pim 10.20.5.202 (GigabitEthernet3/12.3299 0023.ebfd.577f) -> 224.0.0.13, 10 packets Jul 30 06:19:47.418 CEST: %SEC-6-IPACCESSLOGRP: list allow_trading_A denied igmp 10.20.5.202 (GigabitEthernet3/12.3299 0023.ebfd.577f) -> 224.0.0.1, 5 packets Jul 30 06:24:47.422 CEST: %SEC-6-IPACCESSLOGRP: list allow_trading_A denied pim 10.20.5.202 (GigabitEthernet3/12.3299 0023.ebfd.577f) -> 224.0.0.13, 10 packets Jul 30 06:24:47.422 CEST: %SEC-6-IPACCESSLOGRP: list allow_trading_A denied igmp 10.20.5.202 (GigabitEthernet3/12.3299 0023.ebfd.577f) -> 224.0.0.1, 5 packets Jul 30 06:29:47.426 CEST: %SEC-6-IPACCESSLOGRP: list allow_trading_A denied pim 10.20.5.202 (GigabitEthernet3/12.3299 0023.ebfd.577f) -> 224.0.0.13, 10 packets Jul 30 06:29:47.426 CEST: %SEC-6-IPACCESSLOGRP: list allow_trading_A denied igmp 10.20.5.202 (GigabitEthernet3/12.3299 0023.ebfd.577f) -> 224.0.0.1, 5 packets Jul 30 06:34:47.430 CEST: %SEC-6-IPACCESSLOGRP: list allow_trading_A denied pim 10.20.5.202 (GigabitEthernet3/12.3299 0023.ebfd.577f) -> 224.0.0.13, 10 packets Jul 30 06:34:47.430 CEST: %SEC-6-IPACCESSLOGRP: list allow_trading_A denied igmp 10.20.5.202 (GigabitEthernet3/12.3299 0023.ebfd.577f) -> 224.0.0.1, 5 packets Jul 30 06:39:47.434 CEST: %SEC-6-IPACCESSLOGRP: list allow_trading_A denied pim 10.20.5.202 (GigabitEthernet3/12.3299 0023.ebfd.577f) -> 224.0.0.13, 10 packets Jul 30 06:39:47.434 CEST: %SEC-6-IPACCESSLOGRP: list allow_trading_A denied igmp 10.20.5.202 (GigabitEthernet3/12.3299 0023.ebfd.577f) -> 224.0.0.1, 5 packets Jul 30 06:44:47.438 CEST: %SEC-6-IPACCESSLOGRP: list allow_trading_A denied pim 10.20.5.202 (GigabitEthernet3/12.3299 0023.ebfd.577f) -> 224.0.0.13, 10 packets Jul 30 06:44:47.438 CEST: %SEC-6-IPACCESSLOGRP: list allow_trading_A denied igmp 10.20.5.202 (GigabitEthernet3/12.3299 0023.ebfd.577f) -> 224.0.0.1, 5 packets RFRA2715#
This vlan should not be seeing pim or igmp packets. Could you restrict these packets in your configuration.
Thank you for your attention to this matter.
Best regards,
Luigi Maria Nappi Deutsche Börse Services s.r.o. Sokolovská 136 B CZ-18400 Prague 8 Phone: +49 69-211-18951 E-mail: netops@deutsche-boerse.com