<html><head><base href="x-msg://4/"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div>I have my answer after contacting Brocade and will post it here for the benefit of anyone else seeking the same answer. What I was looking for was rACLs although there are a few other features as specified below. This was the response from Brocade:</div><div><br></div><div><span class="Apple-style-span" style="font-family: Arial, Verdana, sans-serif; color: rgb(0, 128, 0); font-size: 13px; ">Here are some of the security features that can be used to protect CPU. This is in addition to the access policies and rate limiting of traffic. <br><br>Please note that each of these functions has benefits and restrictions. Hence please go through the documentation prior implementing any of these. <br><br>IP Receive ACLs <br>The IP receive access-control list feature (rACL) provides hardware-based filtering capability for IPv4 traffic <br>destined for the CPU in the default VRF such as management traffic. Its purpose is to protect the management <br>module's CPU from overloading due to large amounts of traffic sent to one of the NetIron router's IP interfaces. <br>Using the rACL command, the specified ACL is applied to every interface on the NetIron router. This eliminates the <br>need to add an ACL to each interface on a NetIron router. <br><br>Transparent VLAN Flooding <br>You can configure your NetIron router for transparent VLAN flooding. This feature allows packets to be forwarded <br>without any form of CPU intervention including MAC learning and MAC destination lookups <br><br>VLAN CPU Protection <br>VLAN CPU protection is recommended for the VLANs which are intended for pure Layer2 use. This feature will <br>protect the CPU from the flooding of unknown-unicast/multicast/broadcast L2 packets on that VLAN. <br><br>Protecting Against Denial of Service Attacks <br>Denial of Smurf/TCP SYN/Reset attacks are explained here. <br><br>All these features are explained in the documentation gude and can be downloaded using the following link <br><br><a href="http://kp.foundrynet.com/Portal/software/default.asp?ACT=DIR&NAME=NetIronXMR-MLX.700\05000.700\05000.700\Manuals.700">http://kp.foundrynet.com/Portal/software/default.asp?ACT=DIR&NAME=NetIronXMR-MLX.700\05000.700\05000.700\Manuals.700</a> </span></div><br><div><div>On Sep 7, 2010, at 12:00 PM, Abello, Vinny wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><span class="Apple-style-span" style="border-collapse: separate; font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; "><div lang="EN-US" link="blue" vlink="purple"><div class="WordSection1" style="page: WordSection1; "><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0.0001pt; margin-left: 0in; font-size: 11pt; font-family: Calibri, sans-serif; ">Hi all,<o:p></o:p></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0.0001pt; margin-left: 0in; font-size: 11pt; font-family: Calibri, sans-serif; "><o:p> </o:p></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0.0001pt; margin-left: 0in; font-size: 11pt; font-family: Calibri, sans-serif; ">I have been trying to locate any documentation for something equivalent to Cisco’s CoPP (control-plane policing) for the Foundry/Brocade NetIron XMR and haven’t had much success. Does such a feature even exist or is it even needed on this platform? I can’t imagine the control-plane is completely immune to attack out of the box. Any pointers to documentation or what the feature or features are called?<o:p></o:p></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0.0001pt; margin-left: 0in; font-size: 11pt; font-family: Calibri, sans-serif; "><o:p> </o:p></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0.0001pt; margin-left: 0in; font-size: 11pt; font-family: Calibri, sans-serif; ">Thanks!<o:p></o:p></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0.0001pt; margin-left: 0in; font-size: 11pt; font-family: Calibri, sans-serif; "><o:p> </o:p></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0.0001pt; margin-left: 0in; font-size: 11pt; font-family: Calibri, sans-serif; ">-Vinny<o:p></o:p></div></div>_______________________________________________<br>foundry-nsp mailing list<br><a href="mailto:foundry-nsp@puck.nether.net" style="color: blue; text-decoration: underline; ">foundry-nsp@puck.nether.net</a><br><a href="http://puck.nether.net/mailman/listinfo/foundry-nsp" style="color: blue; text-decoration: underline; ">http://puck.nether.net/mailman/listinfo/foundry-nsp</a></div></span></blockquote></div><br></body></html>