Infrastructure Security - Troubleshooting Control Plane Policing (CoPP

6 important questions on Infrastructure Security - Troubleshooting Control Plane Policing (CoPP

What are the 4 steps to configure Control Plane Policing (CoPP)?

  1. Create ACLs to identify the traffic
  2. Create class maps to define a traffic class
  3. Create policy maps to define a service policy
  4. Apply the service policy to the control plane

What are 5 points to focus on when troubleshooting ACLs for CoPP?

  1. Grouping - Have different protocols been grouped together but shouldn't have.
  2. Action - A permit action applies the CoPP policy, a deny action ignores the traffic.
  3. Protocol - Is the correct protocol defined in the ACL
  4. Source and Destination - Is the correct source and destination defined.
  5. Operators and ports - Are operators (Greater-than or equal-to) and ports defined correctly

What are 5 points to look at when troubleshooting class maps for CoPP?

  1. Access Group - Is the correct ACL applied
  2. Instruction - match-any vs match-all (important with multiple match statements)
  3. Protocol - If an ACL is not used is the correct protocol defined in the match statement.
  4. IP PREC/IP DSCP - Is it correct if chosen instead of ACL
  5. Case - ACL names are case sensitive
  • Higher grades + faster learning
  • Never study anything twice
  • 100% sure, 100% understanding
Discover Study Smart

What is important to remember when troubleshooting policy-maps for CoPP?

  1. Order of operations - Policy maps are process from the top down
  2. Class map - has the correct class map been defined
  3. Policy - Has the correct CIR or RATE been applied
  4. Default class - How is the default class configured. For all traffic not matching defined classes
  5. Case - Class map names are case sensitive

What are 3 points to focus on when configuring a Service Policy for CoPP?

  1. Interface - has it been applied to the correct interface?
  2. Direction - must the policy be applied for ingress or egress traffic?
  3. Case - the Policy map name is case sensitive.

What are the 4 basic steps to troubleshoot CoPP?

  1. Verify Service Policy. Correct direction?
    show policy-map control-plane
  2. Verifiy Policy Map.
    show policy-map control-plane
    show policy-map
  3. Verify Class Map
    show class-map
  4. Verify the ACL
    show access-list


The question on the page originate from the summary of the following study material:

  • A unique study and practice tool
  • Never study anything twice again
  • Get the grades you hope for
  • 100% sure, 100% understanding
Remember faster, study better. Scientifically proven.
Trustpilot Logo