03-30-2022 03:27 PM
Hello,
I am configuring Control plane protection on R3.
1.1.1.1 is the loopback on R1.
3.3.3.3 is the loopback on R3.
ospf is running between R1,R2 and R3. and all routes are excanged.
R1----R2----R3
COPP is configured on R3.
ip access-list extended acl1
permit ip 1.1.1.1 0.0.0.0 3.3.3.3 0.0.0.0
exit
class-map class1
match access-group acl1
exit
policy-map policy1
class class1
police 8000
conform-action transmit
exceed-action drop
control-plane
service-policy in policy1
whenever I ping from 1.1.1.1 to 3.3.3.3 with a rate of more than 8000bits per sec I do not see any packet drop because of COPP configuration. Although I see packet numbers of class-default keep on changing. I am not sure what is not right in the configuration of COPP.
R3#show policy-map control-plane
Control Plane
Service-policy input: policy1
Class-map: class1 (match-all)
0 packets, 0 bytes
5 minute offered rate 0000 bps, drop rate 0000 bps
Match: none
police:
cir 8000 bps, bc 1500 bytes
conformed 0 packets, 0 bytes; actions:
transmit
exceeded 0 packets, 0 bytes; actions:
drop
conformed 0000 bps, exceeded 0000 bps
Class-map: class-default (match-any)
909 packets, 744800 bytes
5 minute offered rate 18000 bps, drop rate 0000 bps
Match: any
Solved! Go to Solution.
03-31-2022 02:22 PM
Thanks for responding. I am able to figure out my mistake. I was giving incorrect mask in ACL.
03-30-2022 03:36 PM
police 80000 conform transmit exceed drop
Can you try above and also do more than 80000.
03-31-2022 02:22 PM
Thanks for responding. I am able to figure out my mistake. I was giving incorrect mask in ACL.
03-31-2022 02:55 PM
Good Job Man
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide