Control Plane Policing (Copp); Overview - Dell Force10 S4810P Configuration Manual

High-density, 1ru 48-port 10gbe switch

Hide thumbs Also See for Force10 S4810P:

Table of Contents

Control Plane Policing (CoPP)

Control Plane Policing (CoPP) uses ACL rules and QoS policies to create filters for a system's control

plane. That filter prevents traffic not specifically identified as legitimate from reaching the system control

plane, rate-limits, traffic to an acceptable level.

Control Plane Policing (CoPP) increases security on the system by protecting the Routing Processor from

unnecessary or DoS traffic, giving priority to important control plane and management traf f ic. CoPP uses a

dedicated control plane configuration through the ACL and QoS CLIs to provide filtering and rate-limiting

capabilities for the control plane packets.

The following illustration shows an example of the difference between having CoPP implemented and not

having CoPP implemented.

is supported on platforms:

Hardware Queue

Rate Limiting

OSPF, VRRP, RIPv2,

IGMP, PIM, xSTP,

LACP, PVST, GVRP, LLDP

BGP, ICMP Echo, ICMP

Reply, ARP Reply, NTP

L3 Local Traffic

ARP Req, DHCP, Unknown L3,

L2 Broadcast on L3 VLAN,

Broadcast L2 DST on VLAN6095

Stacking, IPC, IRC, VLT

MAC Learning Limit

Violation Log, HyperPull

Per-Protocol

Rate Limiting

OSPF 200 PPS

Control Plane Policing (CoPP) | 293