[c-nsp] 6500 CoPP + IPv6 fragments

Bernhard Schmidt berni at birkenwald.de
Wed Jun 29 15:38:33 EDT 2011


Richard Gallagher <rgallagh at cisco.com> wrote:

> Sup720 appears to be unable to handle the ipv6 fragments in HW,
> therefore they will be sent to the CPU to be processed, if CoPP is on
> and there are matching entries they will be matched and potentially
> policed/dropped. 
>
> CSCsa78144 covers some of the details of this.

I was aware of this hardware limitation, but in my case the fragments
are always dropped when CoPP is enabled. Even if there is no policing
for any class or all IPv6 traffic is classified into a not-policed
class. 

Bernhard



More information about the cisco-nsp mailing list