If the probes are using a substantial amount of CPU inside the
network, it may be cheaper (CPU-wise) to deny SNMP inbound on border
routers...Bye Bye problem, Hello access-list log to automate email
from
Yup, thats exactly the right thing to do, my network drops all SNMP packets
at all transit and access points, mmm Ascend GRF 
Regards,
Neil.
That is funny, one of our Ascend GRF units ignores SNMP completely (even
to itself). (Not desired behavior).
-Deepak.
Deepak Jain wrote:
That is funny, one of our Ascend GRF units ignores SNMP completely (even
to itself). (Not desired behavior).
The GRF has a highly tweakable TCP/IP stack. For example, by default
the
router will only respond to 10 ICMP packets/second (but that number can
be
changed in grinchd.conf, I think). The router can be passing packets
normally, and if someone is ping flooding an interface on the router,
your own (or your customer's) ping to the router can fail miserably.
This
is not really a router problem.
There are some very good Netstar engineers in Minneapolis (if they
haven't
all frozen to death). Seek one of them out.
-peter
