hit counter script

Cisco Nexus 9000 Series Configuration Manual page 510

Nx-os security configuration guide, release 9.x
Hide thumbs Also See for Nexus 9000 Series:
Table of Contents

Advertisement

Configuring IP ACL Filtering for CoPP
13. control-plane Dynamic mode
14. service-policy-dynamic input policy-map-name
DETAILED STEPS
Command or Action
Step 1
configure terminal
Example:
switch# configure terminal
switch(config)#
Step 2
[no] hardware access-list tcam region erg-copp size
Example:
switch(config)# hardware access-list tcam region
erg-copp 256
Step 3
copy running-config startup-config
Example:
switch(config)# copy running-config startup-config
Step 4
reload
Example:
switch(config)# reload
Step 5
configure terminal
Example:
switch# configure terminal
switch(config)#
Step 6
ip access-list IP-foo-1
Example:
switch# ip access-list mac-foo-1
switch(config-acl)#
Step 7
permit tcp access-list IP-foo-1 eq bgp
Example:
switch(config-acl)# 10 permit tcp 10.1.1.1/32
10.1.1.2/32 eq bgp
Step 8
class-map type control-plane [match-all | match-any]
class-map-name
Example:
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
484
police [cir] {cir-rate [rate-type]}
• police [cir] {cir-rate [rate-type]} [bc] burst-size [burst-size-type]
• police [cir] {cir-rate [rate-type]]} conform transmit [violate drop]
Configuring Control Plane Policing
Purpose
Enters global configuration mode.
Configures the size of the egress CoPP TCAM region.
Copies the running configuration to the startup
configuration.
Reloads the device.
The new size values are effective only after you
Note
enter copy running-config startup-config +
reload or reload all line card modules.
Enters global configuration mode.
Specifies a control plane class map and enters class map
configuration mode. The default class matching is
match-any. The name can be a maximum of 64 characters
long and is case sensitive.

Hide quick links:

Advertisement

Table of Contents
loading

Table of Contents

Save PDF