Permit Tcp Any Any Eq - Cisco Catalyst 4500 Series Configuration Manual

Chapter 2 Cisco IOS Commands for the Catalyst 4500 Series Switches
control-plane
To enter control-plane configuration mode, which allows users to associate or modify attributes or
parameters (such as a service policy) that are associated with the control plane of the device, use the
control-plane command.
Syntax Description This command has no arguments or keywords.
Command Default Default service police system-cpp-policy is attached.
Command Modes
Global configuration mode
Command History Release
12.2(31)SG
12.2(50)SG
12.2(52)XO
12.2(54)XO
Usage Guidelines After you enter the control-plane command, you can define control plane services for your route
processor. For example, you can associate a service policy with the control plane to police all traffic that
is destined to the control plane.
Examples These examples show how to configure trusted hosts with source addresses 10.1.1.1 and 10.1.1.2 to
forward Telnet packets to the control plane without constraint, while allowing all remaining Telnet
packets to be policed at the specified rate:
Switch(config)# access-list 140 deny tcp host 10.1.1.1 any eq telnet
! Allow 10.1.1.2 trusted host traffic.
Switch(config)# access-list 140 deny tcp host 10.1.1.2 any eq telnet
! Rate limit all other Telnet traffic.
Switch(config)# access-list 140 permit tcp any any eq telnet
! Define class-map "telnet-class."
Switch(config)# class-map telnet-class
Switch(config-cmap)# match access-group 140
Switch(config-cmap)# exit
Switch(config)# policy-map control-plane
Switch(config-pmap)# class telnet-class
Switch(config-pmap-c)# police 32000 1000 conform transmit exceed drop
Switch(config-pmap-c)# exit
Switch(config-pmap)# exit
control-plane
Modification
This command was introduced on the Catalyst 4500 series switch.
This command was introduced on Supervisor 6-E and Catalyst 4900M.
This command was introduced on Supervisor 6L-E
This command was introduced on Catalyst 4948-E
Catalyst 4500 Series Switch Cisco IOS Command Reference—Release XE 3.9.xE and 15.2(5)Ex
control-plane
2-137