[c-nsp] sup720 CoPP/ratelimiters

Saku Ytti saku+cisco-nsp at ytti.fi
Mon Jan 30 12:09:22 EST 2006


On (2006-01-30 12:01 -0500), Phil Rosenthal wrote:
> Hello,
> 
> On Jan 30, 2006, at 5:47 AM, Saku Ytti wrote:
> 
> >My main pains about CoPP:
> >
> >1) no ARP (7600), CLNS matches supported
> > -you can't CAR non matching traffic to 0bps, you'd kill your IS-IS
> >
> 
> I have my non-matching traffic CAR'd to 0bps, and it works fine.

 As far as I know, IS-IS is trasnported over CLNS, not IS-IS over IPv4.
Why it may work for you is that CLNS traffic doesn't hit even the default
rule, which is not guaranteed, as it's not supported. When it is (if ever)
supported, behaviour might change.

> I account for IS-IS like this:
> 
> access-list 149 permit 46 any any
> access-list 149 permit 124 any any
> 
> class-map match-all rsvp-isis
>   match access-group 149
> 
>   class rsvp-isis
>      police 80000 2500 2500 conform-action transmit exceed-action drop
> 
> 
> --Phil
> 

-- 
  ++ytti


More information about the cisco-nsp mailing list