CONTROL PLANE POLICING OR RATE LIMITING POLICING?
The control plane represents packets PROCESSED by the router. So if things are “destined” for the router’s IP addresses themselves, COPP would be the likely solution.
If this is about things going THROUGH the router then standard rate-limiting would be the choice.
I think the wording is a little vague for that example, so it would either beg asking the proctor a clarification question, or look at other tasks right around it to gain more context.
HTH,
Scott Morris, CCIE4 (R&S/ISP-Dial/Security/Service Provider) #4713, JNCIE-M #153, JNCIS-ER, CISSP, et al. CCSI/JNCI-M/JNCI-ER VP - Technical Training - IPexpert, Inc. IPexpert Sr. Technical Instructor
smorris@ipexpert.com
Telephone: +1.810.326.1444 Fax: +1.810.454.0130 http://www.ipexpert.com
—–Original Message—– From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of Carlos Trujillo Sent: Tuesday, March 25, 2008 11:08 AM To: ccielab@groupstudy.com Subject: CONTROL PLANE POLICING OR RATE LIMITING POLICING?
Hi Group.
Im trying to figure when to use Control Plane policing applied in the control plane of the router or instead use rate-limiting applied in a interface of the router. I have 2 solutions to a question, and Please if someone can help me clarify what is the correct solution may I employ, or if both solutions work fine according to the following requirements:
Let see my example:
Configure R1 so that it limits traffic to 8000k destined to all of its interfaces.
———ETH0/0[ROUTER-1]ETH0/1——-
eth0/0 ip address 1.1.1.1 255.255.255.0
eth 0/1 ip address 2.2.2.2 255.255.255.0
****** SOLUTION 1:
access-list 101 permit ip any host 1.1.1.1 access-list 101 permit ip any host 2.2.2.2
int eth 0/0 rate-limit input access-group 101 8000 1500 2000 conform-action transmit exceed-action drop
int eth 0/1 rate-limit input access-group 101 8000 1500 2000 conform-action transmit exceed-action drop
*******SOLUTION 2:
class-map control-plane-class match access-group 101
policy-map control-plane-policy class control-plane-class police 8000 conform-action transmit exceed-action drop
























