Control Plane Policing (Copp) - Dell S4048–ON Configuration Manual

12

Control Plane Policing (CoPP)

Control plane policing (CoPP) uses access control list (ACL) rules and quality of service (QoS) policies to create filters for a system's
control plane. That filter prevents traffic not specifically identified as legitimate from reaching the system control plane, rate-limits,
traffic to an acceptable level.
CoPP increases security on the system by protecting the routing processor from unnecessary or DoS traffic, giving priority to
important control plane and management traffic. CoPP uses a dedicated control plane configuration through the ACL and QoS
command line interfaces (CLIs) to provide filtering and rate-limiting capabilities for the control plane packets.
The following illustration shows an example of the difference between having CoPP implemented and not having CoPP implemented.
Figure 30. Control Plane Policing
231
Control Plane Policing (CoPP)