Control Plane Policing (Copp) - Dell Z9000 Configuration Manual

11

Control Plane Policing (CoPP)

Control plane policing (CoPP) is supported on the Z9000 platform.
Control plane policing (CoPP) uses access control list (ACL) rules and quality of service (QoS) policies to
create filters for a system's control plane. That filter prevents traffic not specifically identified as legitimate
from reaching the system control plane, rate-limits, traffic to an acceptable level.
CoPP increases security on the system by protecting the routing processor from unnecessary or DoS
traffic, giving priority to important control plane and management traffic. CoPP uses a dedicated control
plane configuration through the ACL and QoS command line interfaces (CLIs) to provide filtering and
rate-limiting capabilities for the control plane packets.
The following illustration shows an example of the difference between having CoPP implemented and
not having CoPP implemented.
Figure 25. Control Plane Policing
239
Control Plane Policing (CoPP)