[c-nsp] Baseline CoPP policies?

[Roland Dobbins]

On Jul 25, 2009, at 7:54 PM, <nasir.shaikh at bt.com>  
<nasir.shaikh at bt.com> wrote:

> So I am thinking that an iACL on the interface should also be  
> sufficient till I have had
> the time to develop and test the CoPP config.


Correct - and if you're running a Sup720, so that ACL counters work,  
you can put in some permits prior to your denies so that the iACL  
serves as a classification ACL for CoPP.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

         Unfortunately, inefficiency scales really well.

		   -- Kevin Lawton