12
Control Plane Policing (CoPP)
Control plane policing (CoPP) uses access control list (ACL) rules and quality of service (QoS) policies to
create filters for a system’s control plane. That filter prevents traffic not specifically identified as legitimate
from reaching the system control plane, rate-limits, traffic to an acceptable level.
CoPP increases security on the system by protecting the routing processor from unnecessary or DoS
traffic, giving priority to important control plane and management traffic. CoPP uses a dedicated control
plane configuration through the ACL and QoS command line interfaces (CLIs) to provide filtering and
rate-limiting capabilities for the control plane packets.
The following illustration shows an example of the difference between having CoPP implemented and
not having CoPP implemented.
Figure 29. Control Plane Policing
Control Plane Policing (CoPP)
271
To Next Page
Loading...
