[c-nsp] sup720 protection on the 6500/7600

Roland Dobbins rdobbins at cisco.com
Sat Feb 17 17:59:29 EST 2007


On Feb 17, 2007, at 1:26 PM, Saku Ytti wrote:

>> ...are different. The latter (set of options) should ALWAYS be set  
>> in my
>> opinion. Thankfully the most important ones are on by default.
>
> Fully agreed. You at least absolutely need to set ip option, ttl  
> failure and
> mtu failure.

Note that the hardware rate-limiters mask/supersede what you've  
configured in CoPP, so as to take that behavior into account when  
using these features together.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at cisco.com> // 408.527.6376 voice

           The telephone demands complete participation.

                       -- Marshall McLuhan



More information about the cisco-nsp mailing list