[c-nsp] C6K, SUP720, 15.1SY, uRPF with ACL, CoPP

Tim Durack tdurack at gmail.com
Wed Oct 2 13:46:57 EDT 2013


Not tested on older IOS. Let me try the tcam test.


On Wed, Oct 2, 2013 at 1:39 PM, Phil Mayers <p.mayers at imperial.ac.uk> wrote:

> On 02/10/13 18:32, Tim Durack wrote:
>
>> Appears to have stopped working. Once CoPP is enabled, I no longer see
>> "CEF-Drop-Suppress: Packet from <IP> via Vlan824 -- ACL check" debug
>> messages.
>>
>
> If you do:
>
> sh vlan internal usage | inc Control
>
> ...to get the CoPP vlan, then:
>
> remote command switch sh tcam interface vlan <VID> qos type2 ip
>
> ...does the TCAM look ok?
>
> What I'm getting at is - if your CoPP denies the things which the RPF
> exception ACL would punt, then what you're seeing is expected.
>
> Did it work on older IOS?
>



-- 
Tim:>


More information about the cisco-nsp mailing list