Procedure
PurposeCommand or Action
Applies the CoPP best practice policy.[no] copp profile [strict | moderate
| lenient | dense]
Step 1
You cannot disable CoPP. If you enter the no form of this
command, packets are rate limited at 50 packets per seconds
Example:
switch(config)# copp profile
moderate
[for releases prior to Cisco NX-OS Release 7.0(3)I2(1)],
or an error message appears [starting with Cisco NX-OS
Release 7.0(3)I2(1)].
(Optional)
Displays the CoPP status, including the last configuration
operation and its status. This command also enables you to
show copp status
Example:
switch(config)# show copp status
Step 2
verify that the CoPP best practice policy is attached to the
control plane.
(Optional)
Displays the CoPP configuration in the running
configuration.
show running-config copp
Example:
switch(config)# show
running-config copp
Step 3
Related Topics
Changing or Reapplying the Default CoPP Policy Using the Setup Utility, on page 139
Copying the CoPP Best Practice Policy
The CoPP best practice policy is read-only. If you want to modify its configuration, you must copy it.
Procedure
PurposeCommand or Action
Creates a copy of the CoPP best practice policy.copp copy profile {strict | moderate |
lenient | dense} {prefix | suffix} string
Step 1
CoPP renames all class maps and policy maps with the
specified prefix or suffix.
Example:
switch# copp copy profile strict
prefix abc
(Optional)
Displays the CoPP status, including the last
configuration operation and its status. This command
show copp status
Example:
switch# show copp status
Step 2
also enables you to verify that the copied policy is not
attached to the control plane.
Cisco Nexus 3600 NX-OS Security Configuration Guide, Release 7.x
134
Configuring Control Plane Policing
Copying the CoPP Best Practice Policy
To Next Page
Loading...
