PurposeCommand or Action
Specifies a control plane class map and enters class map
configuration mode. The default class matching is
class-map type control-plane [match-all | match-any]
class-map-name
Step 2
match-any. The name can be a maximum of 64 characters
long and is case sensitive.
Example:
switch(config)# class-map type control-plane
ClassMapA
switch(config-cmap)#
You cannot use class-default, match-all, or
match-any as class map names.
Note
Specifies matching for an IP ACL.
(Optional) match access-group name access-list-name
Step 3
Example:
The permit and deny ACL keywords are ignored
in the CoPP matching.
Note
switch(config-cmap)# match access-group name
MyAccessList
Specifies matching for IPv4 or IPv6 ICMP redirect
exception packets.
(Optional) match exception {ip | ipv6} icmp redirect
Example:
Step 4
switch(config-cmap)# match exception ip icmp
redirect
Specifies matching for IPv4 or IPv6 ICMP unreachable
exception packets.
(Optional) match exception {ip | ipv6} icmp
unreachable
Example:
Step 5
switch(config-cmap)# match exception ip icmp
unreachable
Specifies matching for IPv4 or IPv6 option exception
packets.
(Optional) match exception {ip | ipv6} option
Example:
Step 6
switch(config-cmap)# match exception ip option
Specifies matching for IP Address Resolution Protocol
(ARP) and Reverse Address Resolution Protocol (RARP)
packets.
match protocol arp
Example:
switch(config-cmap)# match protocol arp
Step 7
Exits class map configuration mode.exit
Example:
Step 8
switch(config-cmap)# exit
switch(config)#
Displays the control plane class map configuration.(Optional) show class-map type control-plane
[class-map-name]
Step 9
Example:
switch(config)# show class-map type control-plane
Copies the running configuration to the startup
configuration.
(Optional) copy running-config startup-config
Example:
Step 10
switch(config)# copy running-config startup-config
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
474
Configuring Control Plane Policing
Configuring a Control Plane Class Map