ALM-3276800477 The number of ND packets that were discarded on an interface because they did not match the binding entries exceeded the threshold
Description
DHCP/1/NDBINDCHECKTRAP:OID [OID] The number of the discarded ND packets that do not match the binding table exceeds the threshold on the interface. (Interface=[OCTET], VlanID=[INTEGER], LastDroppedSourceMac=[OCTET], DiscardedNumber=[INTEGER])
The number of ND packets that were discarded on an interface because they did not match the binding entries exceeded the threshold.
Attribute
Alarm ID |
Alarm Severity |
Alarm Type |
---|---|---|
3276800477 |
Critical |
Equipment alarm |
Parameters
Name |
Meaning |
---|---|
OID |
Indicates the MIB object ID of the alarm. |
Interface |
Interface name. |
VlanID |
VLAN ID. |
LastDroppedSourceMac |
Source MAC address of the last discarded packet. |
DiscardedNumber |
Number of discarded packets. |
Impact on the System
Invalid ND packets are discarded.
Possible Causes
Attacks from bogus ND users were received.
Procedure
-
Run the display nd snooping user-bind command to check information about ND snooping binding entries on the interface and determine the interface or VLAN from which the user goes online based on the source MAC address of the last discarded packet.
-
Obtain the ND packets received on the interface or in the VLAN using the port mirroring method.
-
If a user connected to the interface sends a large number of ND packets that do not match the binding entries, the user is an unauthorized user and the sent packets are attack packets. The device discards the attack packets. Check the attack source based on the user's IPv6 address or MAC address.
-
If a user connected to the interface does not send a large number of ND packets that do not match the binding entries, the packets sent by the user are not attack packets. To ensure that the users pass the check, cancel the nd snooping check { na | ns | rs } enable command configuration on the interface.
-
Related Information
None
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.
For any further questions, feel free to contact us through the chatbot.
Chatbot