[c-nsp] CoPP

[Mike Bernico]

CoPP is definitely a good thing, but it is not a silver bullet.  We've
had some luck with it, but if you throw enough traffic at the box it
will still die.  It does tend to make it hard to kill however, and we
prefer it over rACLs where available.  

12.0.30S on the GSR is supposed to have distributed CoPP, should be even
better.

Mike Bernico


-----Original Message-----
From: Roger Weeks [mailto:rjw at mcn.org] 
Sent: Tuesday, April 12, 2005 11:48 AM
To: cisco-nsp at puck.nether.net
Subject: [c-nsp] CoPP

This is very interesting, I haven't looked at CoPP before but as an ISP

it sounds like something we should be looking at.

Is anyone else using CoPP in their infrastructure?  I'd like to hear  
about your experiences.

Roger Weeks

On Apr 12, 2005, at 9:00 AM, cisco-nsp-request at puck.nether.net wrote:

> Date: Tue, 12 Apr 2005 10:16:44 -0400
> From: Rodney Dunn <rodunn at cisco.com>
> Subject: Re: [c-nsp] Filtering on sender IP#
> To: Mikael Carlander <rip at kth.se>
> Cc: cisco-nsp at puck.nether.net
>
> You can do it per-interface or globally via CoPP.
>
> http://www.cisco.com/en/US/products/sw/iosswrel/ps1838/ 
> products_feature_guide09186a00801afad4.html
>
> We are working very hard to try and push the filtering down in  
> hardware with CoPP and there will be more developments in this area as

> we move forward so it would be a good idea to become familar with this

> conept.
>
--
Roger J. Weeks
Systems & Network Administrator
Mendocino Community Network
Now offering DSL in Northern California

_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/