Purpose
Command or Action
Specifies a control plane class map and enters
class map configuration mode. The default class
class-map type control-plane
[
match-all
|
match-any
]
class-map-name
Step 2
matching is match-any. The name can be a
Example:
switch(config)# class-map type
control-plane ClassMapA
switch(config-cmap)#
maximum of 64 characters long and is case
sensitive.
You cannot use class-default, match-all,
or match-any as class map names.
Note
(Optional)
Specifies matching for an IP ACL.
match access-group name access-list-name
Example:
switch(config-cmap)# match access-group
name MyAccessList
Step 3
The permit and deny ACL keywords
are ignored in the CoPP matching.
Note
(Optional)
Specifies matching for IPv4 or IPv6 ICMP
redirect exception packets.
match exception
{
ip
|
ipv6
}
icmp redirect
Example:
switch(config-cmap)# match exception ip
icmp redirect
Step 4
(Optional)
Specifies matching for IPv4 or IPv6 ICMP
unreachable exception packets.
match exception
{
ip
|
ipv6
}
icmp
unreachable
Example:
switch(config-cmap)# match exception ip
icmp unreachable
Step 5
(Optional)
Specifies matching for IPv4 or IPv6 option
exception packets.
match exception
{
ip
|
ipv6
}
option
Example:
switch(config-cmap)# match exception ip
option
Step 6
Specifies matching for IP Address Resolution
Protocol (ARP) and Reverse Address Resolution
Protocol (RARP) packets.
match protocol arp
Example:
switch(config-cmap)# match protocol arp
Step 7
Exits class map configuration mode.
exit
Example:
switch(config-cmap)# exit
switch(config)#
Step 8
(Optional)
Displays the control plane class map
configuration.
show class-map type control-plane
[
class-map-name
]
Example:
switch(config)# show class-map type
control-plane
Step 9
Cisco Nexus 3600 NX-OS Security Configuration Guide, Release 7.x
128
Configuring Control Plane Policing
Configuring a Control Plane Class Map
