Solved

UNKNOWN /Unicast-Multicast and Broadcast Terminology

Posted on 2016-08-28
8
55 Views
Last Modified: 2016-09-25
I have encontered some words that are not really clear to understand such as:

Unknown Unicast, is it a Broadcast ?
Unknown Multicast ?


any clarifications ?

Thank you
0
Comment
Question by:jskfan
  • 4
  • 3
8 Comments
 
LVL 79

Assisted Solution

by:David Johnson, CD, MVP
David Johnson, CD, MVP earned 250 total points (awarded by participants)
ID: 41773825
This happens when you plug in a new client into a network and someone tries to access it. Since no other switch knows how to route to that device (which switch and port) So the switch will send an unknown unicast packet (like a broadcast) to discover which switch and which port the destination is. It will then learn that route.

Unknown unicast traffic consists of unicast packets with unknown destination MAC addresses. By default, the switch floods these unicast packets that traverse a VLAN to all interfaces that are members of that VLAN. Forwarding this type of traffic can create unnecessary traffic that leads to poor network performance or even a complete loss of network service. This flooding of packets is known as a traffic storm.

To prevent a traffic storm, you can disable the flooding of unknown unicast packets to all VLAN interfaces by configuring specific VLANs or all VLANs to forward all unknown unicast traffic traversing them to a specific interface. You can configure multiple VLANs to forward unknown unicast packets to the same interface or configure different interfaces for different VLANs. This channels the unknown unicast traffic traversing VLANs to specific interfaces instead of flooding all interfaces.
https://www.juniper.net/documentation/en_US/junos16.1/topics/concept/rate-limiting-unknown-unicast-forwarding-understanding.html

From a switch's forwarding point of view, there is not much of a difference between unknown unicast and broadcast. The main difference is that broadcast frames are by nature meant to be sent to all ports in the specific VLAN, while unknown unicast are only initially sent to all ports - once the outgoing port is learned, the switch will only forward it out the port where the receiver is located.

A broadcast frame can be identifed by examining the destination MAC address - it will be all one's (FF:FF:FF:FF:FF:FF).



Unknown multicast is when the switch isn’t running IGMP Snooping.  Without multicast support, the switch doesn’t know which ports the receivers are on.  So instead, it just treats multicast like a broadcast and sends it everywhere.  If IGMP snooping is on then multicast is forwarded like unicast, where the CAM table is checked to see which ports are subscribed to the MAC address.  The difference is that in unicast only one port can be subscribed to a MAC address at a time (i.e. the same MAC can’t be on 2 ports at the same time) but with multicast it can.

http://ieoc.com/forums/t/29903.aspx
1
 

Author Comment

by:jskfan
ID: 41775138
I checked the link above http://ieoc.com/forums/t/29903.aspx


<<The main difference is that broadcast frames are by nature meant to be sent to all ports in the specific VLAN>>

Ok the Broadcast is clear

the Unknown Unicast is not clear , on the same site it says :
<< while unknown unicast are only initially sent to all ports - once the outgoing port is learned, the switch will only forward it out the port where the receiver is located.>>

Initially sent to all ports ? are all ports on the switch or all ports on the same VLAN ?

Not clear yet
0
 
LVL 79

Expert Comment

by:David Johnson, CD, MVP
ID: 41775517
all ports just like a broadcast packet. it is so it can learn the path and port for future reference.
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 

Author Comment

by:jskfan
ID: 41776521
so where is the difference between Unknown Unicast and Broadcast?
0
 
LVL 79

Expert Comment

by:David Johnson, CD, MVP
ID: 41776797
The packet header is different
0
 

Author Comment

by:jskfan
ID: 41782002
The packet header is different
How is it different? can you please elaborate a little bit on that ?
0
 
LVL 27

Accepted Solution

by:
Predrag Jovic earned 250 total points (awarded by participants)
ID: 41786623
example - L3 network 192.168.0.0/24

Unknown unicast - packet with destination IP address other than broadcast IP address (e.g 192.168.0.14)
Broadcast - packet with destination address 192.168.0.255
the Unknown Unicast is not clear, on the same site it says :
<< while unknown unicast are only initially sent to all ports - once the outgoing port is learned, the switch will only forward it out the port where the receiver is located.>>
Process is called flooding. Once when host that is destination for unknown unicast traffic send any traffic - flooding stops since need for flooding is gone, destination address is known from that moment. If there is no host with specific IP address present flooding continues - that's the actual problem that should be prevented. :)
0
 
LVL 79

Expert Comment

by:David Johnson, CD, MVP
ID: 41814546
Predrag's comment was a real life scenario rather than a textbook answer
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
CISCO Smartnet agreement 5 37
SBS Server 2011 does not recognize a PC as being Online 8 50
Fiber optic multimode cable issue 6 33
Home wifi - Does it matter what router? 9 42
How to set-up an On Demand, IPSec, Site to SIte, VPN from a Draytek Vigor Router to a Cyberoam UTM Appliance. A concise guide to the settings required on both devices
I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

832 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question