Hi,

Is there a way to limit unknown unicast on an AP-Bridge WDS-dymanic mode?

My problem is that i have several SXT's connected to AP, each SXT with multiple MAC's behind.
If one SXT goes out of link (for different reasons, like power outage, power cut, etc) all downlink traffic with DST-MAC one of the MAC's behind that CPE is sent by the AP as unknown unicast to all remaining CPE's, thus killing cell performance (CPU on AP goes up to 100%).

It will be nice to have the option to limit unknown unicast, multicast and broadcast to a user-defined number of packets per second or mbps.

Bogdan

Later edit - is it possible to do it from bridge filter, limiting "otherhost" traffic (like in the attached picture) ?

Hi,

I have found the way to limit broadcast and multicast:

0 ;;; otherhost
chain=forward action=accept packet-type=other-host
1 ;;; broadcast
chain=forward action=accept packet-type=broadcast limit=400,20
2 ;;; multicast
chain=forward action=accept packet-type=multicast limit=200,10
3 ;;; host
chain=forward action=accept packet-type=host
4 ;;; drop all
chain=forward action=drop

So, it's limiting broadcast to 400pps and multicast to 200pps, but known unicast and unknown unicast is matched on the first rule (otherhost).
The rules must be applied on all units (AP and CPEs).

Any suggestions for unknown unicast?

nobody has issues with unknown unicast?

Hi there, Did you find way to limit it?

Is there any EoIP tunnels running over that links?