Cisco Nexus 9000 Series Configuration Manual page 508

Configuring ARP ACL Filtering for CoPP
Command or Action
switch# configure terminal
switch(config)#
Step 2 [no] hardware access-list tcam region erg-copp size
Example:
switch(config)# hardware access-list tcam region
erg-copp 256
Step 3 copy running-config startup-config
Example:
switch(config)# copy running-config startup-config
Step 4 reload
Example:
switch(config)# reload
Step 5 configure terminal
Example:
switch# configure terminal
switch(config)#
Step 6
mac access-list mac-foo-1
Example:
switch# mac access-list mac-foo-1
switch(config-mac-acl)#
Step 7 class-map type control-plane [match-all | match-any]
class-map-name
Example:
switch(config)# class-map type control-plane
match-any c-map2
switch(config-cmap)#
Step 8 (Optional) match access-group name access-list-name
Example:
switch(config-cmap)# match access-group name
IP-foo-1
Step 9 policy-map type control-plane policy-map-name
Example:
switch(config)# policy-map type control-plane
ClassMapA
switch(config-pmap)#
Step 10 class {class-map-name [insert-before class-map-name2]
| class-default}
Example:
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
482
Configuring Control Plane Policing
Purpose
Configures the size of the egress CoPP TCAM region.
Copies the running configuration to the startup
configuration.
Reloads the device.
The new size values are effective only after you
Note
enter copy running-config startup-config +
reload or reload all line card modules.
Enters global configuration mode.
Specifies a control plane class map and enters class map
configuration mode. The default class matching is
match-any. The name can be a maximum of 64 characters
long and is case sensitive.
Specifies a control plane policy map and enters policy map
configuration mode. The policy map name can have a
maximum of 64 characters and is case sensitive.
Specifies a control plane class map name or the class
default and enters control plane class configuration mode.