350-401 Question 258
Select 3A network administrator notices excessive CPU utilization on a Cisco router due to a high volume of malicious traffic targeting the control plane. The administrator decides to implement Control Plane Policing (CoPP) to mitigate this. Which of the following actions are appropriate when configuring CoPP on the router?
- A
Define a class map to match specific traffic types, such as ICMP or SSH
- B
Apply the CoPP policy to an outbound interface to block unwanted traffic
- C
Create a policy map to associate the class map with desired actions, such as policing or dropping traffic
- D
Use the 'control-plane' keyword to apply the CoPP policy to the control plane
- E
Enable CoPP by default, as it does not require manual configuration
Show answer and explanation
Correct answers: A, C, D
Explanation
CoPP is used to protect the router's control plane by filtering and rate-limiting traffic destined for the CPU. The configuration process involves defining a class map to specify the traffic type, creating a policy map to define actions for the matched traffic, and applying the policy to the control plane using the 'control-plane' keyword. CoPP is not enabled by default, and it does not apply to outbound interface traffic.
- A. Correct.
Correct: Defining a class map is a critical step in CoPP configuration. It allows the administrator to match specific traffic types, such as ICMP, SSH, or other protocols.
- B. Incorrect.
Incorrect: CoPP is applied to the control plane, not an outbound interface. Outbound interfaces are not part of the control plane traffic.
- C. Correct.
Correct: A policy map is essential to define actions for matched traffic, such as rate-limiting, policing, or dropping specific types of traffic.
- D. Correct.
Correct: The 'control-plane' keyword is required to apply the CoPP policy to the control plane, ensuring it protects the router's CPU.
- E. Incorrect.
Incorrect: CoPP is not enabled by default. It must be manually configured to protect the control plane.