Implemented Control Plane Protection/Policing

[jim.normand]

Looking for anyone who has implemented Control Plane Protection/Policing and can provide feedback on your experience with it.

Thanks,

Jim

[nkarpysh]

Hi Jim,

Any specific platform you are looking CoPP for? CoPP is really useful things and can help to keep your CPU safe. that is widely deployed. If you have any particular questions on it - can try to answer.

Nik

[debbie.westall]

Greetings,

How about on the 3725 router?

A couple specific questions I have while configuring the portion for IGPs.

Here is a couple snips of example configurations I'm finding on the Internet, that I have questions on.

1. Cisco CoPP Best Practices
access-list 120 permit ospf any  
access-list 120 permit ospf any host 224.0.0.5 
access-list 120 permit ospf any host 224.0.0.6 

2. Deploying Cisco Control Plane Policing
ip access-list extended coppacl-igp
 remark CoPP IGP traffic class
 ! permit OSPF
 permit ospf any host 224.0.0.5
 permit ospf any host 224.0.0.6
 permit ospf any any 

3. RFC6192
  ip access-list extended OSPF
    permit ospf 192.0.2.0 0.0.0.255 any


Questions - Which optionis better?
- Is the network specified in option #3, the network statement under the OSPF process,  
 or the actual network I'm routing?

-  If option #1 is better, what is the "router receive block" mentioned?

Thank you for your assistance!!

Debbie