topic Re: C9800 Control Plane Policing (CoPP) in Wireless

C9800 Control Plane Policing (CoPP)

Johannes Luther — Mon, 05 Jul 2021 20:01:21 GMT

Hi Wireless folks,

I'm playing around with a C9800 and I'm wondering where the CoPP configuration and documentation is. I bet the box does some CoPP out-of-the box and I want to understand how it works and whether it can be tuned.

For example, I'm wondering why my SCP/SFTP transfers to the WLC are ~20MBit/s despite of TCP windows size tuning in a high speed network. I bet this is because of CoPP.

For other platforms this is pretty well documented. As I understood the C9800 platform correctly, it's based on an ASR1k.

Anyway: Any input here for me?

Best regards

Johannes

Re: C9800 Control Plane Policing (CoPP)

Mark Elsen — Mon, 22 Mar 2021 08:50:40 GMT

- FYI : https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/16-12/configuration_guide/sec/b_1612_sec_9300_cg/configuring_control_plane_policing.html

Re: C9800 Control Plane Policing (CoPP)

Johannes Luther — Mon, 22 Mar 2021 09:01:55 GMT

Cat 9300 != 9800

Catalyst 9300:

C9300#show policy-map system-cpp-policy
Policy Map system-cpp-policy
Class system-cpp-police-ios-routing
police rate 13000 pps
conform-action transmit
exceed-action drop
Class system-cpp-police-ios-feature
police rate 6000 pps
conform-action transmit
exceed-action drop
Class system-cpp-police-data
police rate 600 pps
conform-action transmit
exceed-action drop
Class system-cpp-police-sys-data
police rate 200 pps
conform-action transmit
exceed-action drop
Class system-cpp-police-sw-forward
police rate 1000 pps
conform-action transmit
exceed-action drop
[...]

Catalyst 9800:

C9800#show policy-map system-cpp-policy
..no output ..
C9800#

In a Cat9800, there is the "control-plane" configuration section, where a policy-map might be applied.
Problem: Supported? Yes/No. In the Cat9300 only the default classes may be used. The only thing which is user-tunable are the policer rates. In a Cat9800, there is no predefined CoPP policy...

Re: C9800 Control Plane Policing (CoPP)

Mark Elsen — Mon, 22 Mar 2021 09:17:52 GMT

- https://cfnng.cisco.com/ , when queried does not list it as being supported for the 9800, check attached document.