Configure Control Plane Policing - Dell Force10 S4810P Configuration Manual

High-density, 1ru 48-port 10gbe switch

Hide thumbs Also See for Force10 S4810P:

Table of Contents

Configure Control Plane Policing

The S4810 can process a maximum of 4200 PPS (packets per second). Protocols that share a single queue

may experience flaps if one of the protocols receives a high rate of control traf f ic even though Per Protocol

CoPP is applied. This happens because Queue-Based Rate Limiting is applied first.

For example, BGP and ICMP share same queue (Q6); Q6 has 400 PPS of bandwidth by default. The

desired rate of ICMP is 100 pps and the remaining 300 pps is assigned to BGP. If ICMP packets come at

400 pps, BGP packets may be dropped though ICMP packets are rate-limited to 100 PPS. This may be

solved by increasing Q6 bandwidth to 700 pps to allow both ICMP and BGP packets and then applying

per-flow CoPP for ICMP and BGP packets. The setting of this Q6 bandwidth is purely dependent on the

incoming traffic for the set of protocols sharing the same queue. If the user is not aware of the incoming

protocol traffic rate then the required Queue Rate Limit value cannot be set. Such queue bandwidth tuning

must be done carefully because the system cannot open up to handle any rate, including traffic coming at

the line rate.

CoPP policies are assigned on a per-protocol or a per-queue basis, and are assigned in CONTROL-PLANE

mode to each port-pipe.

Control Plane Policing (CoPP)

Hardware Queue

Rate Limiting

Q7 receives STP at 1100 pps due to network storm/loop.

The CPU is hit with the entire 1100 pps and the PING attemp fails intermittently.

Hardware Queue

Rate Limiting

CoPP restricts the STP control packet rate to the CPU to 100 pps. PING works reliably.

No CoPP Rules

Per-Protocol

Rate Limiting

OSPF 200 PPS

OPSF flood CPU at 1100 PPS