Purpose
Command or Action
The class-default class map is always at the end of the
class map list for a policy map.
switch(config-pmap)# class ClassMap2
switch(config-pmap-c)#
Specifies the committed information rate (CIR). The rate
range is as follows:
Enter one of the following commands:
Step 11
•
police
[
cir
] {
cir-rate
[
rate-type
]}
The committed burst (BC) range is as follows:
•
police
[
cir
] {
cir-rate
[
rate-type
]} [
bc
]
burst-size
[
burst-size-type
]
•
police
[
cir
] {
cir-rate
[
rate-type
]]}
conform transmit
[
violate drop
]
Example:
switch(config-pmap-c)# police cir 52000 bc 1000
packets
Enters the control plane dynamic configuration mode.
control-plane Dynamic mode
Example:
Step 12
switch(config)# control-plane dynamic mode
switch(config-cp-dyn)#
Specifies a policy map for the input traffic. ENd
service-policy-dynamic input policy-map-name
Example:
Step 13
switch(config-cp-dyn)# service-policy-dynamic
input PolicyMap1
Configuring IP ACL Filtering for CoPP
You can configure IP ACL filtering at egress CoPP.
Before you begin
Ensure that you have configured a control plane policy map.
SUMMARY STEPS
1.
configure terminal
2.
[
no
]
hardware access-list tcam region erg-copp size
3.
copy running-config startup-config
4.
reload
5.
configure terminal
6.
ip access-list IP-foo-1
7.
permit tcp access-list IP-foo-1 eq bgp
8.
class-map type control-plane
[
match-all
|
match-any
]
class-map-name
9.
(Optional)
match access-group name access-list-name
10.
policy-map type control-plane policy-map-name
11.
class
{
class-map-name
[
insert-before class-map-name2
] |
class-default
}
12.
Enter one of the following commands:
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
483
Configuring Control Plane Policing
Configuring IP ACL Filtering for CoPP
