Administrator Guide

Figure 27. CoPP Versus Non-CoPP Operation
Configure Control Plane Policing
You can create a CoPP service policy on a per-protocol and/or a per-queue basis that serves as the system-wide configuration
for filtering and rate limiting control-plane traffic.
Configuring CoPP for Protocols
This section describes how to create a protocol-based CoPP service policy and apply it to control plane traffic.
To create a protocol-based CoPP service policy, you must first create a Layer 2, Layer 3, and/or an IPv6 ACL rule for specified
protocol traffic. Then, create a QoS input policy to rate-limit the protocol traffic permitted by the ACL. Associate the ACL and
QoS policy for each protocol in a QoS input policy-map and apply the complete protocol-based rate-limiting configuration to
control-plane traffic.
For complete information about creating ACL rules and QoS policies, see Access Control Lists (ACLs) and Quality of Service
(QoS).
1. Create a Layer 2 extended ACL for specified protocol traffic.
CONFIGURATION mode
mac access-list extended name cpu-qos
permit {arp | frrp | gvrp | isis | lacp | lldp | stp}
Control Plane Policing (CoPP)
231