I was troubleshooting an enterprise network for slowness the speed. So when I went through the troubleshooting steps I found that there is an IPv6 and IPv4 unknown unicast flooding that occurs in the Lan interface. it’s a medium enterprise where they have almost 400 end hosts including telephone and IP cameras as well.
find the picture given below when there is no flooding, basically, the flooding stays for some time and goes automatically after some time.
find the picture given below when there is no flooding, basically, the flooding stays for some time and goes away automatically after some time.
find the picture given below when the flooding attack continues.
Solution
Note:-This problem can happen at any network where you may have IP cameras, IPTV, and other multicast sources .
i want to block all unknown multicast traffic on vlan 1.
/interface vlan
add interface=ether5 name=LAN vlan-id=26
add interface=ether5 loop-protect=on name=vlan1 vlan-id=1
/interface bridge
add name=bridge1
/interface bridge port
add bridge=bridge1 interface=ether5
add bridge=bridge1 interface=vlan1 unknown-multicast-flood=no
Now let’s check the multicast traffic on the interface. As you can see below the multicast traffic is disappeared and there will be no multicast flooding.
