Reference Guide

10
Control Plane Policing (CoPP)
Control plane policing (CoPP) is supported on the Z9000 platform.
Control plane policing (CoPP) uses access control list (ACL) rules and quality of service (QoS) policies to create filters
for a system’s control plane. That filter prevents traffic not specifically identified as legitimate from reaching the system
control plane, rate-limits, traffic to an acceptable level.
CoPP increases security on the system by protecting the routing processor from unnecessary or DoS traffic, giving
priority to important control plane and management traffic. CoPP uses a dedicated control plane configuration through
the ACL and QoS command line interfaces (CLIs) to provide filtering and rate-limiting capabilities for the control plane
packets.
The following illustration shows an example of the difference between having CoPP implemented and not having CoPP
implemented.
Figure 25. Control Plane Policing
215