Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 
Users might experience few discrepancies in Search results. We are working on this on our side. We apologize for the inconvenience it may have caused.
New Member

Shunning router ACL leaking?

Is it possible that a shunning router will leak normally blocked inbound packets? Possibly when the acl numbers are changed on the inbound shunning interface? We're seeing a few packets get through that should be blocked by the pre-shun acl, and were blocked 100% before shunning was enabled. We've confirmed the pre and post shun are correctly in the active shunning acl.

If it can't happen, where should I be looking for the problem?

Considering also applying the pre-shun to opposite interface outbound for a workaround?

New Member

Re: Shunning router ACL leaking?

A related question is: what happens when the cpu hits 100%? Does that affect how the ACL's are handled?

New Member

Re: Shunning router ACL leaking?

Good point. Ours is a 3540 is does peak at 100% briefly now rather than the 50% is was peaking at before shunning.

Can anyone shed some light on these things?

New Member

Re: Shunning router ACL leaking?

Correction, router is 3640.

Anyone else, please?

CreatePlease to create content