Configuring the Switch to Discard IP Packets Matching No Routing Entry
Context
If the switch receives an IP packet that matches no routing entry in the local routing table, it sends the packet to the CPU. If a lot of IP packets match no routing entry because of an attack or incorrect network configuration, the CPU is busy. To prevent this problem, configure the switch to discard these packets.