Cisco Nexus 3600 NX-OS - Page 142

PurposeCommand or Action
Specifies a control plane class map and enters
class map configuration mode. The default class
class-map type control-plane [match-all |
match-any] class-map-name
Step 2
matching is match-any. The name can be a
Example:
switch(config)# class-map type
control-plane ClassMapA
switch(config-cmap)#
maximum of 64 characters long and is case
sensitive.
You cannot use class-default, match-all,
or match-any as class map names.
Note
(Optional)
Specifies matching for an IP ACL.
match access-group name access-list-name
Example:
switch(config-cmap)# match access-group
name MyAccessList
Step 3
The permit and deny ACL keywords
are ignored in the CoPP matching.
Note
(Optional)
Specifies matching for IPv4 or IPv6 ICMP
redirect exception packets.
match exception {ip | ipv6} icmp redirect
Example:
switch(config-cmap)# match exception ip
icmp redirect
Step 4
(Optional)
Specifies matching for IPv4 or IPv6 ICMP
unreachable exception packets.
match exception {ip | ipv6} icmp
unreachable
Example:
switch(config-cmap)# match exception ip
icmp unreachable
Step 5
(Optional)
Specifies matching for IPv4 or IPv6 option
exception packets.
match exception {ip | ipv6} option
Example:
switch(config-cmap)# match exception ip
option
Step 6
Specifies matching for IP Address Resolution
Protocol (ARP) and Reverse Address Resolution
Protocol (RARP) packets.
match protocol arp
Example:
switch(config-cmap)# match protocol arp
Step 7
Exits class map configuration mode.exit
Example:
switch(config-cmap)# exit
switch(config)#
Step 8
(Optional)
Displays the control plane class map
configuration.
show class-map type control-plane
[class-map-name]
Example:
switch(config)# show class-map type
control-plane
Step 9
Cisco Nexus 3600 NX-OS Security Configuration Guide, Release 7.x
128
Configuring Control Plane Policing
Configuring a Control Plane Class Map