Cat 3560X Control Plane Policing?

[K-Grev]

Hi,

I've gone through the steps on a 3560 to make a control plane policy. ACLS, Class maps, and policy maps. I would like to apply it to the control plane input but it doesnt seem like the commands are there?

Does anyone know the proper way to apply this?

Thanks

[balaji.bandi]

what mind of License you have

CoPP is supported only on LAN BASE, IP Lite, and IP Service licenses.

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960cx_3650cx/software/release/15-2_5_e/configuration_guide/b_1525e_consolidated_3560cx_2960cx_cg/b_1525e_consolidated_3560cx_2960cx_cg_chapter_01001011.html

[K-Grev]

Thanks for your reply. It has an ipservices license active.

[balaji.bandi]

Can you post show version

follow as suggested guide and let us know what you not able to configure or challenge you have

[K-Grev]

 I see, I was doing it more in this way.

https://vaulted.io/library/disa-stigs-srgs/cisco_ios_switch_ndm_security_technical_implementation_guide/V-220609

i can do everything but apply it to the control plane.

sho ver: flash:3560e-universal-mz.152-4.E7

[balaji.bandi]

can you post the config and give us example what error you getting when you apply ?

[K-Grev]

Thanks,

I don't necessarily get an error, the command just isn't there for me.

#conf t

#c?

call-home   captive-portal-bypass   cdp   cef

cisp   class-map   cins clock

cluster   cns   coap   configuration

crypto   cts

These are my options.

Normally i believe you would apply it like this: control-plane> service-policy input "POLICY-NAME"

Config attached.

Thanks for your help.

[balaji.bandi]

3560 has limited features as per I know, please refer to the guide that is the command syntax available.

[K-Grev]

So, if adding the policy maps to the control plane isnt an option, i could just add them to some specific interfaces instead to get a similar effect?

[K-Grev]

When I try this way on a 3560 i can type mls qos but cannot follow that with copp.

Thanks