cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
501
Views
0
Helpful
0
Replies

CoPP on MAC address ACL

jobg12345
Level 1
Level 1

Hi

I should to configure CoPP on the CISCO7613

So i tested it

My purpose is to handle the L2control packet(BPDU, CDP...)

I think to handle the BPDU using the MAC address ACL

Below the configuration and result

=====================================================


mac access-list extended DEN_BPDU
permit any host 0100.0ccc.cccd


class-map match-all DEN_BPDU
  match access-group name DEN_BPDU


policy-map DEN_BPDU
  class DEN_BPDU
    police 500000 conform-action transmit exceed-action drop


PE2#sh policy-map control-plane
Control Plane

  Service-policy input: DEN_BPDU

  Hardware Counters:

    class-map: DEN_BPDU (match-all)
      Match: access-group name DEN_BPDU
      police :
        496000 bps 15000 limit 15000 extended limit
      Earl in slot 6 :
        0 bytes
        5 minute offered rate 0 bps
        aggregate-forwarded 0 bytes action: transmit
        exceeded 0 bytes action: drop
        aggregate-forward 0 bps exceed 0 bps

  Software Counters:

    Class-map: DEN_BPDU (match-all)
      0 packets, 0 bytes
      5 minute offered rate 0000 bps, drop rate 0000 bps
      Match: access-group name DEN_BPDU
      police:
          cir 500000 bps, bc 15625 bytes
        conformed 0 packets, 0 bytes; actions:
          transmit
        exceeded 0 packets, 0 bytes; actions:
          drop
        conformed 0000 bps, exceed 0000 bps

    Class-map: class-default (match-any)
     4236778 packets, 271162012 bytes
      5 minute offered rate 194000 bps, drop rate 0000 bps
      Match: any

=====================================================


I configured the MAC ACL using the multicast MAC address(BPDU).

You can see the result...

The BPDU packets do not match the Class-map so i read the document but it does not mention to be possible using the MAC ACL on CoPP

I want to know can i use the MAC ACL on CoPP.

Let me know it for me

Thank you

0 Replies 0
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card