All things related to multicast

["Taylor, Scott J." <>]

We at CEN would be curious to hear feedback on how people in large
campus and ISP environments are trying to mitigate this problem or are
rate limit this type of traffic in their networks as well.  We have "ip
sap listen" turned off on our networks and didn't notice the effects of
the event.  Is turning off "ip sap listen" enough of a BCP to mitigate
this type of problem in the future?

Thanks,

Scott J. Taylor
Network Technician
Connecticut Education Network
University of Connecticut
Tel: 860/622.2242
Helpdesk: 860/622.2300

-----Original Message-----
From: Simon Lockhart 
[mailto:]
 On Behalf Of Simon
Lockhart
Sent: Thursday, February 21, 2008 15:17
To: Alan Crosswell
Cc: Morytko, Steve; 

Subject: Re: SDP spike

On Thu Feb 21, 2008 at 03:09:23PM -0500, Alan Crosswell wrote:
> There still is the rate-limiting issue.  If someone DoSes SAP, then if
> you rate limit, odds are you will lose the good announcements and SAP
> will become useless. 

If someone DoS's SAP, then SAP becomes useless anyway - our users on the
end of DSL lines were complaining that their DSL lines were full of SAP
traffic (as well as their router CPU melting).

Is it sensible to rate-limit SAP to 1Mbps? Anyone doing this with "ip
multicast rate-limit" on Cisco, and got advice?

Simon