CoPP policies are configured by creating extended ACL rules and specifying rate-limits through QoS policies. The ACLs and QoS policiesare assigned as service-policies.Configuring CoPP for ProtocolsThis section lists the commands necessary to create and enable the service-policies for CoPP.For complete information about creating ACLs and QoS rules, refer to Access Control Lists (ACLs) and Quality of Service (QoS).The basics for creating a CoPP service policy are to create a Layer 2, Layer 3, and/or an IPv6 ACL rule for the desired protocol type. Then,create a QoS input policy to rate-limit the protocol traffics according to the ACL. The ACL and QoS policies are finally assigned to a control-plane service policy for each port-pipe.1 Create a Layer 2 extended ACL for control-plane traffic policing for a particular protocol.CONFIGURATION modemac access-list extended name cpu-qospermit {arp | frrp | gvrp | isis | lacp | lldp | stp}2 Create a Layer 3 extended ACL for control-plane traffic policing for a particular protocol.CONFIGURATION modeip access-list extended name cpu-qospermit {bgp | dhcp | dhcp-relay | ftp | icmp | igmp | msdp | ntp | ospf | pim | ip | ssh |telnet | vrrp}3 Create an IPv6 ACL for control-plane traffic policing for a particular protocol.CONFIGURATION modeipv6 access-list name cpu-qospermit {bgp | icmp | vrrp}4 Create a QoS input policy for the router and assign the policing.CONFIGURATION modeqos-policy-input namecpu-qos rate-police rate-police-value5 Create a QoS class map to differentiate the control-plane traffic and assign to an ACL.CONFIGURATION modeclass-map match-any namecpu-qos match {ip | mac | ipv6} access-group name6 Create a QoS input policy map to match to the class-map and qos-policy for each desired protocol.CONFIGURATION modepolicy-map-input namecpu-qos class-map name qos-policy name7 Enter Control Plane mode.CONFIGURATION modecontrol-plane-cpuqosControl Plane Policing (CoPP) 243
