Control Plane Policing (Copp) - Dell S3048-ON Configuration Manual

11

Control Plane Policing (CoPP)

Control plane policing (CoPP) uses access control list (ACL) rules and quality of service (QoS) policies to create filters for a system's
control plane. That filter prevents traffic not specifically identified as legitimate from reaching the system control plane, rate-limits, traffic to
an acceptable level.
CoPP increases security on the system by protecting the routing processor from unnecessary or DoS traffic, giving priority to important
control plane and management traffic. CoPP uses a dedicated control plane configuration through the ACL and QoS command line
interfaces (CLIs) to provide filtering and rate-limiting capabilities for the control plane packets.
The following illustration shows an example of the difference between having CoPP implemented and not having CoPP implemented.
Figure 25. Control Plane Policing
Control Plane Policing (CoPP) 231