What is Policy ID 0 and why lot of denied traffic on this policy?

Forum|Forum|10 years ago
March 10, 2016
10 replies
50254 views

Hi All,

I have a problem with Policy ID 0, which is blocking certain broadcast traffic which is generating huge size of logs.

I googled and found the following command could stop this traffic:

config log setting set local-in-deny-broadcast {enable | disable} set local-in-deny-unicast {enable | disable} end But my question is, why is it generating this much of deny logs ? how to identify the origin of this ? Please help me ... Firewall version: 5.0.7 Thanks a trillion in advance !!! Regards, Sridhar Sre

5.0

AlexFeren

New Member

> why is it generating this much of deny logs ? how to identify the origin of this ?

Look at the logs - they will tell you origin and destination.

I had similar problem, but not "huge size of logs". Destination was a (EIGRP) multicast address and it was received on a transparent mode VDOM that was also a management VDOM.