cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3366
Views
10
Helpful
5
Replies

iACL vs COPP

imfvieira
Level 1
Level 1

We have a 7600 router and the 7600 has 2 links with BGP.

We have a interface ACL direction in to block some traffic, for example BGP traffic.

We also have a COPP-BGP with a ACL too, with fewer blocks.

Question is which will be checked first, iACL or COPP.
After sometime reading and looking, I found a document:

http://www.cisco.com/web/about/security/intelligence/coppwp_gs.html

It shows a picture with iACL before COPP, so my first thought seems to be wrong (that the COPP will be first and iACL would be checked after).

What is the order?? iACL --> COPP or COPP --> iACL

If iACL is first the COPP ACL can be less retrictive.

Does anyone know what is the right order?

thnks

1 Accepted Solution

Accepted Solutions