HP 1920 and IP v6

[Dunky]

I am guessing the answer is going to be no, but is it possible to bin all IPv6 traffic at the point of ingress (i.e. on the interface).

The reason I ask is because I beleive there may be some intel NICs on new laptops that are having a massive IPv6 neighbour discovery storm when they are supposed to be asleep.  Given that we dont run IPv6 and the clients do not come under my remit, I need to bin this traffic before it gets onto the LAN if at all possible?

[parnassus]

I guess it would be possible by using IPv6 ACL Access Control List VLAN related (sort of packet filtering) to deny such type of ingress undesired traffic (QoS menu -> ACL IPv6 sub-menu)...try to see if the Configuring ACLs chapter of HPE OfficeConnect 1920 Switch Series User Guide is the right place to start with.

[Dunky]

Thanks Parnassus, I will have a look at that next time I am in the office.

[parnassus]

Probably related to your request: it looks like HPE already knows who is potentially causing massive IPv6 multicast traffic which floods...impacting globally on switch performances (read here).

[Dunky]

Many thanks parnassus, that looks really useful.

Now if only there was a way of seeing the peak %utilization of an interface on a 1920!!

[Dunky]

Does anyone know how to stop all IPv6 traffic on an interface?

Will this do it...

acl ipv6 number 3010

 description Bin all IPv6 traffic

 rule 10 deny ipv6 destination any

interface GigabitEthernet1/0/n

 packet-filter ipv6 3010 inbound