[c-nsp] DCEF and CPP

[Gabor Ivanszky]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello,

I am not sure on this, but on 7500 only dCEF is supported, and dCEF
runs only on the linecards, and not on the RSP. Control plane policing
should take place on the RSP, which in turn don't have any congestion
mgmt/avoidance function at all.

regards,
Gabor

Networkers wrote:
> Hi I am trying to turn on control-plane policing on a 7500 with
> RSP4 and VIP2/50's running 12.2(25)S12, and I have/get this:
>
> ip cef distributed ! class-map match-all TrustedControlAddresses
> match access-group 153 ! policy-map AllowTrustedControlAddresses
> class TrustedControlAddresses police cir 32000 bc 1500 be 1500
> conform-action drop exceed-action drop
>
>
> router(config)#control-plane router(config-cp)#service input
> AllowTrustedControlAddresses service-policy is supported only on
> VIP interfaces with DCEF enabled error: failed to install policy
> map AllowTrustedControlAddresses
>
> I already have ip cef distributed in the config, and I did an ip
> route-cache dist under the fast ethernet, ATM and DS3 interfaces
> installed in the router.  What am I missing?
>
> Thanks, Chris
>
>
> _______________________________________________ cisco-nsp mailing
> list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp archive at
> http://puck.nether.net/pipermail/cisco-nsp/

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHQTvYDiqVI6Xm21MRAqGAAKCYbRDkhbVB0+o2Gk3GvmF5ByEznwCgmHUm
F1hz3915AWdTcx9R3R2RXAA=
=8Ybm
-----END PGP SIGNATURE-----