Procedure
Purpose
Command or Action
Applies the CoPP best practice policy.
[
no
]
copp profile
[
strict
|
moderate
|
lenient
|
dense
]
Step 1
You cannot disable CoPP. If you enter the
no
form of this
command, packets are rate limited at 50 packets per seconds
Example:
switch(config)# copp profile
moderate
[for releases prior to Cisco NX-OS Release 7.0(3)I2(1)],
or an error message appears [starting with Cisco NX-OS
Release 7.0(3)I2(1)].
(Optional)
Displays the CoPP status, including the last configuration
operation and its status. This command also enables you to
show copp status
Example:
switch(config)# show copp status
Step 2
verify that the CoPP best practice policy is attached to the
control plane.
(Optional)
Displays the CoPP configuration in the running
configuration.
show running-config copp
Example:
switch(config)# show
running-config copp
Step 3
Related Topics
Changing or Reapplying the Default CoPP Policy Using the Setup Utility, on page 139
Copying the CoPP Best Practice Policy
The CoPP best practice policy is read-only. If you want to modify its configuration, you must copy it.
Procedure
Purpose
Command or Action
Creates a copy of the CoPP best practice policy.
copp copy profile
{
strict
|
moderate
|
lenient
|
dense
} {
prefix
|
suffix
}
string
Step 1
CoPP renames all class maps and policy maps with the
specified prefix or suffix.
Example:
switch# copp copy profile strict
prefix abc
(Optional)
Displays the CoPP status, including the last
configuration operation and its status. This command
show copp status
Example:
switch# show copp status
Step 2
also enables you to verify that the copied policy is not
attached to the control plane.
Cisco Nexus 3600 NX-OS Security Configuration Guide, Release 7.x
134
Configuring Control Plane Policing
Copying the CoPP Best Practice Policy
