hint is good for unknown multicast....to block all multicast do: S5#sh run int fa 0/20 Building configuration... Current configuration : 151 bytes ! interface FastEthernet0/20 switchport mode dynamic desirable switchport protected storm-control multicast level 0.00 spanning-tree portfast end S5#