[c-nsp] CoPP config examples

matthew zeier mrz at intelenet.net
Thu Jun 30 14:13:53 EDT 2005


> 
>  Of course as CoPP is done in GSR in LC CPU (like rACL) (as opposed to 
> ASIC) it's impossible to protect network properly without doing iACL/iPolicer,
> but CoPP would complement iACL nicely, to allow protection against
> attacks inside the AS#, which might be small enough for LC CPU to handle.
>  For the record, some platforms, like NSE100 do not even support 'protocol
> arp', so quickly it would feel like that any IXP member or customer
> misbehaving even by accidently could kill my IGP by overwhelming GRP
> with ARP storm. Still CoPP is good start, 

So CoPP is new to me but I really liked the idea of rACLs and do wish I had 
them on this 7600 platform.

--
matthew zeier, Sr. Network Engineer  | "Nothing in life is to be feared.
InteleNet Communications, Inc.       |  It is only to be understood."
(949) 784-7904                       |       - Marie Curie


More information about the cisco-nsp mailing list