Configuration Examples For Control Plane Policing; Example: Configuring Control Plane Policing On Input Telnet Traffic; Additional References - Cisco ASR 920 Series Configuration Manual

Policing and shaping configuration guide

Hide thumbs Also See for ASR 920 Series:

Table of Contents

Configuration Examples for Control Plane Policing

The following example shows how to apply a QoS policy for aggregate control plane services to Telnet traffic

that is received on the control plane. Trusted hosts with source addresses 10.1.1.1 and 10.1.1.2 forward Telnet

packets to the control plane without constraint while allowing all remaining Telnet packets to be policed at

the specified rate.

! Allow 10.1.1.1 trusted host traffic.

Device(config)# access-list 140 permit tcp host 10.1.1.1 any eq telnet

! Allow 10.1.1.2 trusted host traffic.

Device(config)# access-list 140 permit tcp host 10.1.1.2 any eq telnet

! Rate-limit all other Telnet traffic.

Device(config)# access-list 140 permit tcp any any eq telnet

! Define class-map "telnet-class."

Device(config)# class-map telnet-class

Device(config-cmap)# match access-group 140

Device(config-cmap)# exit

Device(config)# policy-map control-plane-in

Device(config-pmap)# class telnet-class

Device(config-pmap-c)# police 80000 conform transmit exceed drop

Device(config-pmap-c)# exit

Device(config-pmap)# exit

! Define aggregate control plane service for the active route processor.

Device(config)# control-plane

Device(config-cp)# service-policy input control-plane-in

Device(config-cp)# end

Table of Contents