[c-nsp] Control-Plane Filters/ACLs

[Phil Mayers]

On 12/03/2010 09:55 PM, Gert Doering wrote:
> Hi,
>
> On Fri, Dec 03, 2010 at 05:18:03PM +0000, Phil Mayers wrote:
>>> Are there some templates or examples I can find? I haven't played
>>> much with CoPP and don't hear a lot of accolades for doing this. The
>>> other obvious question would be "does this run in hardware or in
>>> software?". Hmm, doubt if the packet ASICs are processing ACL's.
>>
>> Provided QoS is globally enabled with "mls qos", CoPP is done in
>> hardware[1] on 6500/sup720, by adding QoS policy-maps into the PFC/DFC
>> qos path.
>
> You're sure you need mls qos for that?  I was under the impression that
> CoPP is always done in hardware (as long as the specific rules permit).

That is my understanding:

"""CoPP is not be enabled in hardware unless you have enabled PFC QoS 
globally with the mls qos command. If you do not enter the mls qos 
command, CoPP is not hardware-accelerated."""

http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/configuration/guide/copp.html