COPP config on Nexus 7k

[ravikantt]

Can we configure "COPP profile strict" on nexus 7k in live production network, can it cause any kind of interruption/outage in network?


Sent from Cisco Technical Support Android App

[InayathUlla Sharieff]

AShok,

Please note that N7k platform forwards transit traffic in hardware, so CoPP has
no impact on it. It is only control protocol packets which are destined
to any of the ip addresses configured on N7k are processed by CPU, and
this is where CoPP comes into play. Please also note that primary
purpose of ICMP is to check network reachability, so tests with high
rate ICMP streams may be justified only if they are to check CPU's
capability to process high traffic rates, but they have no sense from
operational standpoint.


Default CoPP settings are based on best practices, but of course you can
change configuration to reflect what you believe is best for your
network. To better understand what CoPP does and how you can tweak it
please read the following document

 
http://www.cisco.com/en/US/docs/switches/datacenter/sw/5_x/nx-os/security/configuration/guide/b_Cisco_Nexus_7000_NX-OS_Security_Configuration_Guide__Release_5.x_chapter_011001.html

http://www.cisco.com/en/US/partner/docs/switches/datacenter/sw/5_x/nx-os
/security/configuration/guide/Cisco_Nexus_7000_NX-OS_Security_Configurat
ion_Guide__Release_5.x_chapter25.html

HTH

Regards

Inayath