Cisco Systems 4500 Configuring CoPP for Data Plane and Management Plane Traffic

44-6
Software Configuration Guide—Release 15.0(2)SG
OL-23818-01
Chapter 44 Configuring Control Plane Policing and Layer 2 Control Packet QoS
Configuring Control Plane Policing
Configuring CoPP for Data Plane and Management Plane Traffic
To configure CoPP for data plane and management plane traffic, perform this task:
Command Purpose
Step 1 Switch(config)# qos (Optional) Enables QoS globally.
Step 2 Switch(config)#
macro global apply system-cpp (Optional) Attaches the system-cpp-policy policy
map to the control plane.
Step 3 Switch(config)# {ip | mac} access-list
extended {access-list-name}
For an ip access list, issue
Switch(config-ext-nacl)#{permit|deny}
{protocol} source {source-wildcard}
destination {destination-wildcard}
For a mac access list, issue
Switch(config-ext-macl)#{permit|deny}
source {source-wildcard} destination
{destination-wildcard} [protocol-family]
OR
Switch(config)# access-list
{access-list-name} {permit | deny}
{type-code wild-mask | address mask}
Defines ACLs to match traffic:
• permit—Sets the conditions under which a
packet passes a named ACL
• deny—Sets the conditions under which a
packet does not pass a name ACL
Note You must configure ACLs in most cases to
identify the important or unimportant
traffic.
• type-code—16-bit hexadecimal number
written with a leading 0x; for example,
0x6000. Specify either a Link Service Access
Point (LSAP) type code for 802-encapsulated
packets or a SNAP type code for
SNAP-encapsulated packets. (LSAP,
sometimes called SAP, refers to the type
codes found in the DSAP and SSAP fields of
the 802 header.)
• wild-mask—16-bit hexadecimal number
whose ones bits correspond to bits in the
type-code argument. The wild-mask indicates
which bits in the type-code argument should
be ignored when making a comparison. (A
mask for a DSAP/SSAP pair should always be
0x0101 because these two bits are used for
purposes other than identifying the SAP
code.)
• address—48-bit Token Ring address written
as a dotted triple of four-digit hexadecimal
numbers. This field is used for filtering by
vendor code.
• mask—48-bit Token Ring address written as a
dotted triple of four-digit hexadecimal
numbers. The ones bits in the mask are the bits
to be ignored in address. This field is used for
filtering by vendor code.