Highlighted
Super Contributor.. Super Contributor..
Super Contributor..
368 views

Viptela vEdge output drops - ICMP due to volume of discovery

The amount of Packets Per Second of ICMP traffic are engaging the ICMP policer. .  It views excessive ICMP packets as an attack on the network. Is ICMP traffic only generated bt the Range IPS by ICMP Job?  If so how can i Throttle the job ?

0 Likes
2 Replies
Highlighted
Acclaimed Contributor.
Acclaimed Contributor.

Re: Viptela vEdge output drops - ICMP due to volume of discovery

Interesting.

I would presume that you can insert some sleep statements in pingIPsInRange from icmp_utils.py.

Never had to do it so thou.

Kind regards,
Bogdan Mureșan

EMEA Technical Success
0 Likes
Highlighted
Acclaimed Contributor.
Acclaimed Contributor.

Re: Viptela vEdge output drops - ICMP due to volume of discovery

You have to change BulkSize and ThreadPoolSize of the Range IPs by ICMDB job. The default settings are done for fast discovery, but by decreasing the limits you can control that. For me the best solution is the ICMP policer to be configured to put an exception to the DFP. It's limits may be so low, that even pinging 5-10 hosts in a minute to trigger an alarm.

icmp.PNG

Cheers,

Petko Popadiyski

Freelance Microfocus CMS UCMDB Consulting

Likes are appreciated!
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.