https://community.cisco.com/t5/network-security/acl-s-and-copp/m-p/4526626#M1086177 <P>I am reading the ENARSI chapter on CoPP, and it had just occurred to me that if we are protecting the CPU from unnecessary burden/ attacks, where are the ACL's processed in the router? Are the processed in CEF at the data plane? I cant seem to remember where the matching/ processing occurs and google wont help. Thanks everyone!</P> Wed, 05 Jan 2022 01:18:21 GMT Zxanthar98 2022-01-05T01:18:21Z https://community.cisco.com/t5/network-security/acl-s-and-copp/m-p/4526626#M1086177 <P>I am reading the ENARSI chapter on CoPP, and it had just occurred to me that if we are protecting the CPU from unnecessary burden/ attacks, where are the ACL's processed in the router? Are the processed in CEF at the data plane? I cant seem to remember where the matching/ processing occurs and google wont help. Thanks everyone!</P> Wed, 05 Jan 2022 01:18:21 GMT https://community.cisco.com/t5/network-security/acl-s-and-copp/m-p/4526626#M1086177 Zxanthar98 2022-01-05T01:18:21Z https://community.cisco.com/t5/network-security/acl-s-and-copp/m-p/4526759#M1086179 Hi,<BR /><BR />These are checked by router processor conceptually because the packets are<BR />destined to device itself. Now the router processor varies depending on<BR />hardware e.g. 2900/3900 are different from ISR4K and ASR and these are<BR />different from 7600, etc.<BR /><BR />So you need to understand the concept and the actual component varies<BR />depending on the platform. You can find more details on Cisco Live slides.<BR /><BR />***** please remember to rate useful posts<BR /> Wed, 05 Jan 2022 08:54:30 GMT https://community.cisco.com/t5/network-security/acl-s-and-copp/m-p/4526759#M1086179 Mohammed al Baqari 2022-01-05T08:54:30Z