[c-nsp] CoPP config examples
matthew zeier
mrz at intelenet.net
Thu Jun 30 14:13:53 EDT 2005
>
> Of course as CoPP is done in GSR in LC CPU (like rACL) (as opposed to
> ASIC) it's impossible to protect network properly without doing iACL/iPolicer,
> but CoPP would complement iACL nicely, to allow protection against
> attacks inside the AS#, which might be small enough for LC CPU to handle.
> For the record, some platforms, like NSE100 do not even support 'protocol
> arp', so quickly it would feel like that any IXP member or customer
> misbehaving even by accidently could kill my IGP by overwhelming GRP
> with ARP storm. Still CoPP is good start,
So CoPP is new to me but I really liked the idea of rACLs and do wish I had
them on this 7600 platform.
--
matthew zeier, Sr. Network Engineer | "Nothing in life is to be feared.
InteleNet Communications, Inc. | It is only to be understood."
(949) 784-7904 | - Marie Curie
More information about the cisco-nsp
mailing list