Multicast IPv6 - Traffic Control

Hi Guys,
We have a Deployment Multicast IPv6, and actually i need traffic control over interface that have EoMPLS configured; what is the best configuration for traffic control (4Mb up and 4Mb down of traffic Multicast).
Or which are the best practices for deployment control traffic in Multicast IPv6?
Thx in advance!

Hi,
It seems you are running EoMPLS with ethernet port mode.
you could do bandwidth managment of traffic shaping on the subinterface each PE.
HTH
Mohamed

Similar Messages

  • ALV Grid Traffic control Example  program implemented with function modules

    Hi Friends,
    Can any one please give me ALV Grid control traffic lights  example program implented using function modules instead of OOP ALV. It is very urgent,
    Thanks in advance,
    Santosh Kumar.

    Hi Santosh ,
    Here is a sampla code for the same
    TYPE-POOLS : SLIS.
    DATA : BEGIN OF IT_1 OCCURS 0 ,
               MATNR TYPE matnr ,
               FLAG TYPE C ,  " added for the traffic control
           END OF IT_1.
    SELECT MATNR INTO TABLE IT_1 " Select Data
    UP TO 10 ROWS
    FROM MARA.
    DATA : CATALOG TYPE SLIS_T_FIELDCAT_ALV ,
           WA_CATALOG TYPE SLIS_FIELDCAT_ALV ,
           LAYOUT TYPE SLIS_LAYOUT_ALV .
    *" create catalog
    WA_CATALOG-FIELDNAME = 'FLAG'.
    WA_CATALOG-TABNAME = 'IT_1'.
    APPEND WA_CATALOG TO CATALOG.
    WA_CATALOG-FIELDNAME = 'MATNR'.
    WA_CATALOG-TABNAME = 'IT_1'.
    APPEND WA_CATALOG TO CATALOG.
    DATA : FLAG_T TYPE I.
    *"assign value to traffic signal
    LOOP AT IT_1.
    FLAG_T = SY-TABIX MOD 2.
    IF FLAG_T = 0.
    IT_1-FLAG = '1'.
    ELSE.
    IT_1-FLAG = '2'.
    ENDIF.
    MODIFY IT_1.
    ENDLOOP.
    *"specify the traffic signal field in the layout
    LAYOUT-LIGHTS_FIELDNAME = 'FLAG'.
    CALL FUNCTION 'REUSE_ALV_GRID_DISPLAY'
    EXPORTING
    *   I_INTERFACE_CHECK                 = ' '
    *   I_BYPASSING_BUFFER                =
    *   I_BUFFER_ACTIVE                   = ' '
    *   I_CALLBACK_PROGRAM                = ' '
    *   I_CALLBACK_PF_STATUS_SET          = ' '
    *   I_CALLBACK_USER_COMMAND           = ' '
    *   I_CALLBACK_TOP_OF_PAGE            = ' '
    *   I_CALLBACK_HTML_TOP_OF_PAGE       = ' '
    *   I_CALLBACK_HTML_END_OF_LIST       = ' '
    *   I_STRUCTURE_NAME                  =
    *   I_BACKGROUND_ID                   = ' '
    *   I_GRID_TITLE                      =
    *   I_GRID_SETTINGS                   =
       IS_LAYOUT                         = LAYOUT
       IT_FIELDCAT                       = CATALOG
    *   IT_EXCLUDING                      =
    *   IT_SPECIAL_GROUPS                 =
    *   IT_SORT                           =
    *   IT_FILTER                         =
    *   IS_SEL_HIDE                       =
    *   I_DEFAULT                         = 'X'
    *   I_SAVE                            = ' '
    *   IS_VARIANT                        =
    *   IT_EVENTS                         =
    *   IT_EVENT_EXIT                     =
    *   IS_PRINT                          =
    *   IS_REPREP_ID                      =
    *   I_SCREEN_START_COLUMN             = 0
    *   I_SCREEN_START_LINE               = 0
    *   I_SCREEN_END_COLUMN               = 0
    *   I_SCREEN_END_LINE                 = 0
    *   IT_ALV_GRAPHICS                   =
    *   IT_ADD_FIELDCAT                   =
    *   IT_HYPERLINK                      =
    *   I_HTML_HEIGHT_TOP                 =
    *   I_HTML_HEIGHT_END                 =
    *   IT_EXCEPT_QINFO                   =
    * IMPORTING
    *   E_EXIT_CAUSED_BY_CALLER           =
    *   ES_EXIT_CAUSED_BY_USER            =
      TABLES
        T_OUTTAB                          = IT_1
    * EXCEPTIONS
    *   PROGRAM_ERROR                     = 1
    *   OTHERS                            = 2
    IF SY-SUBRC <> 0.
    * MESSAGE ID SY-MSGID TYPE SY-MSGTY NUMBER SY-MSGNO
    *         WITH SY-MSGV1 SY-MSGV2 SY-MSGV3 SY-MSGV4.
    ENDIF.
    so rem all you need to do is add a feild in internal table for the traffic signal , assign values 0 , 1, 2 to it and last specify the name of this feild in the layout.
    Regards
    Arun

  • Best way to pass IPv4 and IPv6 traffic over a GRE Tunnel

    Hello,
    We have two 3825 routers with Advanced Enterprise IOS 12.4.9(T). Each of them serves many IPv4 (private and public) and IPv6 networks on their respective site.
    We have created a wireless link between the two, using 4 wireless devices, with IP Addresses 10.10.2.2, 3, 4, 5 respectively (1 and 6 are the two end Ethernet interfaces on the routers).
    Then we created a GRE tunnel over this link using addresses 172.16.1.1 and 2 (for the two ends) to route traffic over this link.
    Now we want to route IPv6 traffic over the same link. However, we found that simply routing the IPv6 traffic over the above GRE / IP tunnel did not work.
    Questions:
    Is there a way we can use the same (GRE / IP) tunnel to transport both IPv4 and IPv6 traffic?
    If not, can we setup two GRE tunnels over the same wireless link, that is, one GRE / IP for IPv4 traffic and a second one GRE / IPv6 for IPv6 traffic?
    In brief, what is the suggested way to transport IPv4 and IPv6 traffic over the aforementioned (wireless) link?
    I have read http://www.cisco.com/c/en/us/td/docs/ios/12_4/interface/configuration/guide/inb_tun.html#wp1061361 and other Internet material, however I am still confused.
    Please help.
    Thanks in advance,
    Nick

    We have set up two tunnels over the same link, one GRE / IP for the IPv4 traffic and one IPv6 / IP ("manual") for the IPv6 traffic. This setup seems to be working OK.
    If there are other suggestions, please advise.
    Thanks,
    Nick

  • IPv4/ IPV6 Traffic Discrimination and Monitoring

    Hi Guys
    I would appreciate a lot your experiences and best practices about operating and monitoring dual stack networks in Service Provider environments. Currently we're working in a 6VPE model for Internet customers in order to provide dual stack services, but we are looking for a way that allows us discriminate and monitor both the IPv4 and IPv6 traffic separately. 
    Does anyone could to share his experiences, how did they were addressed?
    What kind of monitoring tools have you used? 
    What did you do in order to guarantee a reliable monitoring strategy?
    I will appreciate your support a lot.
    Marcelo

    Hi Russell,
    I'm in the process of writing a program to do this as I've not seen anything that provides this function available.
    For your wired network you should have an inventory of assets containing at least MAC addresses and the user who owns the device.
    On your wireless networks you will probably be using SLAAC and I guess you must be using 802.1x in which case you will be able to identify users to MAC addresses.
    Essentially you need to periodically gather (less than the age timer) the IPv6 neighbour table from your core switches (or any edge etc, if it routes), this will give you the GUA and ULA against the MAC address. If you using an type of authentication parse those logs for usernames and MAC addresses.
    Stir it all together in a database and you should have timestamp, IPv6 address, MAC and user .
    cheers,
    Seb.

  • Does IPv6 traffic "pass-through" or "drop" by cisco waas?

    Since cisco waas is not yet supported IPv6, if i am running IPv4 and IPv6 dual stack mode on the same circuit, does IPv6 traffic get dropped by the waas or does waas put IPv6 traffic in "pass-through" mode and let it goes?  I am thinking, waas will treat IPv6 as non-IP traffic and will let it goes.  Am i right?
     

    Hi Joe and Kanwai,
    One note though - if your running WCCP as the redirection mode, you won't get the IPv6 traffic redirected, as WCCP does NOT support IPv6. Hence you won't see IPv6 traffic at all on the WAAS device.
    Best Regards
    Finn Poulsen

  • Receive IPv6 traffic - kernel panic?

    I configured an IPv4 -> IPv6 tunnel on my firewall via he.net and set my default route for inet6 traffic to the remote side. Then I got a /64 network assigned from he.net and IP'd my internal network, include my MacBook Pro running OS X 10.4.8.
    I can do a traceroute6 from my Mac to external sites just fine. It uses the IPv6 tunnel exactly as expected (I set my default route for IPv6 on my Mac to be the IPv6 address of the internal interface of my firewall). When I tried to use an external site to do a traceroute6 back to my Mac, it panicked!
    Perhaps there is some problem with the Intel version of the Yukon driver (Marvell Yukon gigabit ethernet)? Has anyone else had kernel panics when on the receiving end of inbound IPv6 traffic (that wasn't in response to an outbound connection)?
    Here's the crash report:
    panic(cpu 0 caller 0x0035BEAC): freeing free mbuf
    Backtrace, Format - Frame : Return Address (4 potential args on stack)
    0x251e3db8 : 0x128d1f (0x3c9540 0x251e3ddc 0x131df4 0x0)
    0x251e3df8 : 0x35beac (0x3e9c7c 0x1dfba 0x87c4b9fe 0x1dfba)
    0x251e3e38 : 0x7314a4 (0x36e07600 0x0 0x251e3e68 0x1a1ec0)
    0x251e3e58 : 0xa6d454 (0x237f1000 0x36e07600 0x0 0x2)
    0x251e3e88 : 0xa6bad0 (0x237f1000 0x36e07600 0x0 0x38dbc80)
    0x251e3ea8 : 0xa6ed7c (0x237f1000 0x0 0x1000000 0x133b25)
    0x251e3f08 : 0x398a1f (0x237f1000 0x38dbc80 0x1 0x37b5d08)
    0x251e3f58 : 0x397bf1 (0x38dbc80 0x135ec3 0x0 0x37b5d08)
    0x251e3f88 : 0x397927 (0x38d7480 0x0 0xee6b280 0x13869f)
    0x251e3fc8 : 0x19a74c (0x38d7480 0x0 0x4 0x4eae6b8) Backtrace terminated-invalid frame pointer 0x0
    Kernel loadable modules in backtrace (with dependencies):
    com.apple.iokit.AppleYukon(1.0.7b3)@0xa69000
    dependency: com.apple.iokit.IONetworkingFamily(1.5.1)@0x72a000
    dependency: com.apple.iokit.IOPCIFamily(2.1)@0x5ee000
    com.apple.iokit.IONetworkingFamily(1.5.1)@0x72a000
    Kernel version:
    Darwin Kernel Version 8.8.1: Mon Sep 25 19:42:00 PDT 2006; root:xnu-792.13.8.obj~1/RELEASE_I386
    Model: MacBookPro1,1, BootROM MBP11.0055.B08, 2 processors, Intel Core Duo, 2.16 GHz, 2 GB
    Graphics: ATI Radeon X1600, ATY,RadeonX1600, PCIe, 256 MB
    Memory Module: BANK 0/DIMM0, 1 GB, DDR2 SDRAM, 667 MHz
    Memory Module: BANK 1/DIMM1, 1 GB, DDR2 SDRAM, 667 MHz
    AirPort: spairportwireless_card_type_airportextreme (0x168C, 0x86), 0.1.27
    Bluetooth: Version 1.7.9f12, 2 service, 0 devices, 1 incoming serial ports
    Network Service: Built-in Ethernet, Ethernet, en0
    Network Service: AirPort, AirPort, en1
    Serial ATA Device: ST910021AS, 93.16 GB
    Parallel ATA Device: MATSHITADVD-R UJ-857
    USB Device: Built-in iSight, Micron, Up to 480 Mb/sec, 500 mA
    USB Device: Apple Internal Keyboard / Trackpad, Apple Computer, Up to 12 Mb/sec, 500 mA
    USB Device: IR Receiver, Apple Computer, Inc., Up to 12 Mb/sec, 500 mA
    USB Device: Bluetooth HCI, Up to 12 Mb/sec, 500 mA

    MTU on the ethernet interfaces of the Mac and the inside the firewall are both 1500 (normal). My switch is only FE so the Mac's NIC auto-neg'd to 100/full. The MTU of the 4->6 tunnel is 1280. I believe that's because of the encapsulation overhead (it has to send the IPv6 packets inside IPv4 packets).
    In any case, it's not using Jumbo Frames (I don't think the switch even supports them).
    I was thinking it might be a problem with the longer address and endianness. For instance, maybe on the Intel platform they did a quick patch to make the address pointer move over a fixed 4 bytes, then read backwards by the length of the address. That would work fine for 4 byte (i.e. IPv4) addresses, but on 16 byte (IPv6) addresses it would go horribly wrong (shift 4 bytes, then read backwards 16 bytes, uh oh!).
    Apparently it only affects some of the code paths, because I can send out IPv6 packets and accept the responses. It was only when I received an unsolicited IPv6 packet that it panicked.
    It's all just a wild guess any way. I would like to experiment with it a little more, but I really don't feel like causing multiple kernel panics and possibly corrupting my file system from the resulting hard-resets.

  • Does iphone supports IPv6 traffic for icloud?

    Hi Everybody,
    Does iphone supports IPv6 traffic for icloud application?

    ckuan
    The question was whether iPhones supports IPv6 protocol. Why would it matter if the network supports IPv4, IPv6, Dual stack or any other protocol? The straight answer is NO it does not as of today (even if the users have to worry about it or not, which is irrelavent imho).
    regards, sajith
    http://www.kaimals.com/

  • Does facetime supports IPv6 traffic?

    Since all  ISP's started IPv6 deployment, just wanted to know whether Facetime supports IPv6 traffic?

    ckuan
    The question was whether iPhones supports IPv6 protocol. Why would it matter if the network supports IPv4, IPv6, Dual stack or any other protocol? The straight answer is NO it does not as of today (even if the users have to worry about it or not, which is irrelavent imho).
    regards, sajith
    http://www.kaimals.com/

  • Does IPv6 traffic support enabled for icloud?

    Hi Everybody,
          Since all ISP's started IPv6 deployment just wanted to know whether IPv6 traffic support enabled for icloud application?

    Apple does not support the 3rd party drives.  To enable it (without installing another software package), you can visit the website:
    http://digitaldj.net/2011/07/21/trim-enabler-for-lion/
    I ran the series of commands on my Mac Pro and it did enable TRIM.
    the webpage even has a backup/back-out procedure.
    Without TRIM, my computer was running extremely slowly.  After enabling TRIM, my computer ran substancially faster.

  • Air Traffic Control Widget Does Not Work With OS 10.6.8

    Air Traffic Control Widget Does Not Work With OS 10.6.8.
    Any suggestions?
    SR

    No I have not. I have thought about just downloading another version...
    Thanks for your reply.
    SR

  • Blocking all ipv6 traffic

    Good morning -  I have an issue that has happened twice - and I need some advice.  I have a 4506 running version 12.2(46)SG. We recently encountered an issue where I BELIEVE the issue to be IPV6 sending out a broadcast storm, and completely flooded the core switch  - bad enough that I couldn't even console into the device.  After removing all connections that were plugged in when the switch went down.  After everything was back up, we found that it was a laptop with ipv6 enabled - exactly the same scenario as last time.  What we found after the first incident was that a faulty NIC driver caused the ipv6 broadcast storm.
    At any rate, as we do not use IPv6 for anything at all, I want to block all IPv6 traffic.  I know there are different ways to do it, but I'm reaching out to see what ideas you may have also...
    Thx in advance for any input!

    Joel,
    If VACLs with IPv6 ACLs are supported on your platform then I would probably use VACLs, as they allow a filter to be applied flatly to the entire VLAN. Your other option would be to configure per-port ACLs which is cumbersome and bloats the configuration unnecessary.
    With IPv6 ACLs, be sure to block ICMPv6 explicitly. As far as I remember, some ICMPv6 messages are allowed even if they are not explicitly permitted in the ACL (usually the RD and ND messaging).
    If your platform allowed filtering all incoming packets by MAC ACLs, yet another way would be to use VACLs with MAC ACLs, blocking all traffic with the EtherType of 0x86DD. However, newer platforms apply MAC ACLs only to non-IP traffic so they would have no effect on frames carrying IPv6 packets. You need to consult the documentation to your device.
    In any way, VACLs would be my personal preferred choice at this point.
    Best regards,
    Peter

  • Network Load Balancing - Multicast IPv6

    I have a two servers with network load balancing. They are configured to use IGMP Multicast which works well with IPv4.  The switch correctly detects the group and sends the traffic to only the ports connected to the servers.
    However i can't get IPv6 working outside of the servers subnet.  You can access the loadbalanced IPv6 address from within the servers subnet but machines outside the subnet cannot access it.
    Does load balancing properly support IPv6?  Should it not support Multicast Listerner Discovery (MLD) to work properly with IPv6? 
    Thanks

    Thanks for your reply. 
    Yes - you are correct. We are using an IPv6 address as the cluster IP address for incoming connections but it can't be access outside of the subnet. The cluster has both a link-local and global address - both are only accessible from within the subnet.
    The two servers that are part of load balancing cluster both have IPv6 address assigned to their network adapters - these are accesible outside the subnet. Infact 80% of all our network traffic is IPv6 - routing is working fine between all servers, workstations
    and devices on our various subnets.  The problem is purley affecting the load balancing IPv6 address.
    The IP config and route tables are below.  Thanks for your help.
    Regards, Daniel
    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation. All rights reserved.
    M:\>ipconfig /all
    Windows IP Configuration
    Host Name . . . . . . . . . . . . : indium
    Primary Dns Suffix . . . . . . . :
    Node Type . . . . . . . . . . . . : Hybrid
    IP Routing Enabled. . . . . . . . : No
    WINS Proxy Enabled. . . . . . . . : No
    DNS Suffix Search List. . . . . . :
    Ethernet adapter Public:
    Connection-specific DNS Suffix . :
    Description . . . . . . . . . . . : Microsoft Virtual Machine Bus Network Ada
    pter
    Physical Address. . . . . . . . . : 00-15-5D-CA-6C-04
    DHCP Enabled. . . . . . . . . . . : No
    Autoconfiguration Enabled . . . . : Yes
    IPv6 Address. . . . . . . . . . . : 2001:630:34:1010::42(Preferred)
    IPv6 Address. . . . . . . . . . . : 2001:630:34:1010::40(Preferred)
    Link-local IPv6 Address . . . . . : fe80::4c7b:41a3:be85:e6c4%10(Preferred)
    Link-local IPv6 Address . . . . . : fe80::95f6:2da7:dcdb:1fc1%10(Preferred)
    IPv4 Address. . . . . . . . . . . : 10.0.0.42(Preferred)
    Subnet Mask . . . . . . . . . . . : 255.255.252.0
    IPv4 Address. . . . . . . . . . . : 10.0.0.40(Preferred)
    Subnet Mask . . . . . . . . . . . : 255.255.252.0
    Default Gateway . . . . . . . . . : 2001:630:34:1010::1
    10.0.0.1
    DHCPv6 IAID . . . . . . . . . . . : 234886493
    DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-14-D0-9F-CD-00-15-5D-01-14-35
    DNS Servers . . . . . . . . . . . : 2001:630:34:1010::10
    2001:630:34:1010::8
    10.0.0.10
    10.0.0.8
    NetBIOS over Tcpip. . . . . . . . : Disabled
    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation. All rights reserved.
    M:\>ipconfig /all
    Windows IP Configuration
    Host Name . . . . . . . . . . . . : aluminium
    Primary Dns Suffix . . . . . . . :
    Node Type . . . . . . . . . . . . : Hybrid
    IP Routing Enabled. . . . . . . . : No
    WINS Proxy Enabled. . . . . . . . : No
    DNS Suffix Search List. . . . . . :
    Ethernet adapter Public:
    Connection-specific DNS Suffix . :
    Description . . . . . . . . . . . : Microsoft Virtual Machine Bus Network Ada
    pter
    Physical Address. . . . . . . . . : 00-15-5D-01-37-04
    DHCP Enabled. . . . . . . . . . . : No
    Autoconfiguration Enabled . . . . : Yes
    IPv6 Address. . . . . . . . . . . : 2001:630:34:1010::43(Preferred)
    IPv6 Address. . . . . . . . . . . : 2001:630:34:1010::40(Preferred)
    Link-local IPv6 Address . . . . . : fe80::95f6:2da7:dcdb:1fc1%10(Preferred)
    Link-local IPv6 Address . . . . . : fe80::fcab:aeb9:175d:9994%10(Preferred)
    IPv4 Address. . . . . . . . . . . : 10.0.0.43(Preferred)
    Subnet Mask . . . . . . . . . . . : 255.255.252.0
    IPv4 Address. . . . . . . . . . . : 10.0.0.40(Preferred)
    Subnet Mask . . . . . . . . . . . : 255.255.252.0
    Default Gateway . . . . . . . . . : 2001:630:34:1010::1
    10.0.0.1
    DHCPv6 IAID . . . . . . . . . . . : 234886493
    DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-14-BF-55-42-00-15-5D-01-13-45
    DNS Servers . . . . . . . . . . . : 2001:630:34:1010::10
    2001:630:34:1010::8
    10.0.0.10
    10.0.0.8
    NetBIOS over Tcpip. . . . . . . . : Disabled
    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation. All rights reserved.
    M:\>route print
    IPv6 Route Table
    ===========================================================================
    Active Routes:
    If Metric Network Destination Gateway
    10 261 ::/0 2001:630:34:1010::1
    1 306 ::1/128 On-link
    10 261 2001:630:34:1010::/64 On-link
    10 261 2001:630:34:1010::40/128 On-link
    10 261 2001:630:34:1010::42/128 On-link
    10 261 fe80::/64 On-link
    10 261 fe80::4c7b:41a3:be85:e6c4/128
    On-link
    10 261 fe80::95f6:2da7:dcdb:1fc1/128
    On-link
    1 306 ff00::/8 On-link
    10 261 ff00::/8 On-link
    ===========================================================================
    Persistent Routes:
    If Metric Network Destination Gateway
    0 4294967295 ::/0 2001:630:34:1010::1
    ===========================================================================

  • Is there any way to get ipad 2 mirroring (beta ios 5) to work with unicast?  The school won't enable multicast for traffic concerns on a many AP wireless network.

    I have the iPad 2 mirroring working in my classroom with my own personal wireless router and an apple tv 2.  We would like to deploy several iPad 2's to teachers for instruction, all using mirroring.  The school district wireless network available throughout the complex has many access points and has multicasting turned off.  They are afraid to enable it because of traffic concerns - many wireless devices all sending everything to every AP on the district wireless network.  Is there any way to come up with an acceptable solution (unicasting?) that will only route traffic to the devices connected to a single access point on the network (the same one the ipad 2 and apple tv are connected to) without sending it to all the access points on the district wireless network?  Short of every teacher having an independent wireless router in each of their rooms (which could still potentially interfere with the district wireless), I don't currently have a solution.   I've heard the network guys through around terms like multicasting, unicasting, igmp, etc.  I don't want to choke down the district wireless either, but there must be a solution to this.  I could easily see 40 teachers in the complex all using iPad 2s mirroring through apple tvs attached to projectors all going on at the same time, but there might only be 3 or 4 on each access point.

    I have the iPad 2 mirroring working in my classroom with my own personal wireless router and an apple tv 2.  We would like to deploy several iPad 2's to teachers for instruction, all using mirroring.  The school district wireless network available throughout the complex has many access points and has multicasting turned off.  They are afraid to enable it because of traffic concerns - many wireless devices all sending everything to every AP on the district wireless network.  Is there any way to come up with an acceptable solution (unicasting?) that will only route traffic to the devices connected to a single access point on the network (the same one the ipad 2 and apple tv are connected to) without sending it to all the access points on the district wireless network?  Short of every teacher having an independent wireless router in each of their rooms (which could still potentially interfere with the district wireless), I don't currently have a solution.   I've heard the network guys through around terms like multicasting, unicasting, igmp, etc.  I don't want to choke down the district wireless either, but there must be a solution to this.  I could easily see 40 teachers in the complex all using iPad 2s mirroring through apple tvs attached to projectors all going on at the same time, but there might only be 3 or 4 on each access point.

  • Traffic Control in NAC

    Hi all,
    Is it possible to control traffic after user is authenticated by NAC? For example, a user can only access the server segment, not to other segment. From what i understand, after user is authenticated by NAC, that user is put to trusted segment and server segment is also in trusted segment, so i think it is not possible. Maybe other have another opinion?
    Thanks.

    Hi Brian,
    You can keep controlling traffic with NAC if you have a Clean Access Server (CAS) deployed inline for example:
    http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/49/cas/s_trfpol.html
    Regards,
    Fede
    If  this helps you and/or answers your question please mark the question as  "answered" and/or rate it, so other users can easily find it.

  • Ssid traffic control

    Hi, I'd like to control the overall ssid traffic coming from the access-point. I'd like to force the destination MAC address to be equal to the MAC of the firewall connected on the ssid vlan.
    Where can I place the control ? on the AP or on the switch connected to the AP ?
    All that to avoid traffic from wireless IP to the wired IP on the same ssid vlan.
    thank you in advance
    RS

    Hi, I forgot to say that for technology limit I cannot implement user AAA on wireless client.
    thank you
    RS

Maybe you are looking for