350-401 Question 256
Select 3An enterprise network administrator has noticed high CPU utilization on a Cisco router due to excessive control plane traffic caused by malformed packets and network scans. To mitigate this, the administrator decides to implement Control Plane Policing (CoPP). Which of the following actions are appropriate steps to implement CoPP effectively?
- A
Define a class-map to match specific types of control plane traffic.
- B
Apply the CoPP policy directly to all interfaces of the router.
- C
Configure a policy-map to define actions like policing or dropping for matched traffic.
- D
Apply the service-policy to the control plane interface using the 'control-plane' keyword.
- E
Enable CoPP globally using the 'copp enable' command.
Show answer and explanation
Correct answers: A, C, D
Explanation
Control Plane Policing (CoPP) is a QoS feature that protects the router's control plane by filtering and rate-limiting control plane traffic. To implement CoPP, the administrator must first define a class-map to match specific traffic, configure a policy-map to define actions, and then apply the policy to the control plane using the 'control-plane' configuration mode. Applying CoPP policies directly to interfaces or using a non-existent global command like 'copp enable' is incorrect.
- A. Correct.
Correct. Defining a class-map is a required step to identify and match specific types of control plane traffic, such as ICMP or routing protocol packets.
- B. Incorrect.
Incorrect. CoPP policies are applied to the control plane, not directly to router interfaces.
- C. Correct.
Correct. A policy-map is used to define specific actions (e.g., policing, shaping, or dropping) for the traffic matched by the class-map.
- D. Correct.
Correct. The CoPP policy must be applied to the control plane using the 'service-policy' command in the control-plane configuration mode.
- E. Incorrect.
Incorrect. There is no command 'copp enable'. CoPP is automatically supported once the policy is defined and applied to the control plane.