Control Plane Policy (CoPP)

[Mysteriousjeti]

Hello  Everyone,

I am attempting to implement (CoPP) but some of the options I need are not available in the CLI.

****************************************************************************************

Switch (config-pmap-c) #police 512000 8000 ?

          exceed-action     action when rate is exceeded

          <cr>

****************************************************************************************

Does anyone know why "conform-action" isn't an available option?

Cisco 3750X

ISO version 15.2

Thanks

G

[acampbell]

Hi,

You need to consult the config guides for your exact IOS version
http://www.cisco.com/c/en/us/support/switches/catalyst-3750-x-series-switches/products-installation-and-configuration-guides-list.html

I have looked at 15.2.1 for the 3750X

You only have 2 options here for policing

Step 7
 
 police  rate-bps burst-byte  [  exceed-action  {  drop  |   policed-dscp-transmit  }]
 
Define a policer for the classified traffic.

By default, no policer is defined. For information on the number of policers supported, see the “Standard QoS Configuration Guidelines” section.
• For  rate-bps,  specify average traffic rate in bits per second (b/s). The range is 8000 to 10000000000.
• For  burst-byte,  specify the normal burst size in bytes. The range is 8000 to 1000000.
• (Optional) Specify the action to take when the rates are exceeded. Use the  exceed-action drop keywords to drop the packet. Use the  exceed-action policed-dscp-transmit keywords to mark down the DSCP value (by using the policed-DSCP map) and to send the packet. For more information, see the “Configuring the Policed-DSCP Map” section.
 
Also acording to the release notes and other searches, the 3750X does not allow you to configure control plane protection policing.
This is carried out dynamically (internally) by the switch itself.

Control Plane Protection

Catalyst 3750-X and 3560-X switches internally support up to 16 different control plane queues. Each queue is dedicated to handling specific protocol packets and is assigned a priority level. For example, STP, routed, and logged packets are sent to three different control plane queues, which are prioritized in corresponding order, with STP having the highest priority. Each queue is allocated a certain amount of processing time based on its priority. The processing-time ratio between low-level functions and high-level functions is allocated as 1-to-2. Therefore, the control plane logic dynamically adjusts the CPU utilization to handle high-level management functions as well as punted traffic (up to the maximum CPU processing capacity). Basic control plane functions, such as the CLI, are not overwhelmed by functions such logging or forwarding of packets.

Hope this helps
Regards
Alex