[c-nsp] N7k CoPP not MPLS-aware?

[Saku Ytti]

On (2013-11-15 09:48 +0000), Phil Mayers wrote:

> Has anyone else seen this? Our N7k CoPP policy seems to be letting
> packets through which are arriving MPLS-labelled. In particular,
> this means it's completely ineffective at protecting the CPU in an
> L3VPN, since all packets inside the VPN arrive labelled.

Alas this is the rule, 7600 having working CoPP is the exception.

In 2006-03-16 I opened TAC case 603198067 complaining how 'explicit-null'
breaks CoPP in GSR, VXR, NSE100, 5400, result was that it was expected
behaviour.

-- 
  ++ytti