From: Daniel Valle (danielfrvalle@gmail.com)
Date: Wed Mar 26 2008 - 17:22:45 ART
Hi Scott,
when you say pocessed by the router, if we set all interfaces to "no ip
route-cache" all packets through the router would be also processed. In that
case would Control pane also work for those transit packets ?
Thanks in advance,
Daniel
On 3/25/08, Scott Morris <smorris@ipexpert.com> wrote:
>
> The control plane represents packets PROCESSED by the router. So if
> things
> are "destined" for the router's IP addresses themselves, COPP would be the
> likely solution.
>
> If this is about things going THROUGH the router then standard
> rate-limiting
> would be the choice.
>
> I think the wording is a little vague for that example, so it would either
> beg asking the proctor a clarification question, or look at other tasks
> right around it to gain more context.
>
> HTH,
>
>
> Scott Morris, CCIE4 (R&S/ISP-Dial/Security/Service Provider) #4713,
> JNCIE-M
> #153, JNCIS-ER, CISSP, et al.
> CCSI/JNCI-M/JNCI-ER
> VP - Technical Training - IPexpert, Inc.
> IPexpert Sr. Technical Instructor
>
> smorris@ipexpert.com
>
>
>
> Telephone: +1.810.326.1444
> Fax: +1.810.454.0130
> http://www.ipexpert.com
>
>
>
>
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
> Carlos Trujillo
> Sent: Tuesday, March 25, 2008 11:08 AM
> To: ccielab@groupstudy.com
> Subject: CONTROL PLANE POLICING OR RATE LIMITING POLICING?
>
> Hi Group.
>
> Im trying to figure when to use Control Plane policing applied in the
> control plane of the router or instead use rate-limiting applied in a
> interface of the router. I have 2 solutions to a question, and Please if
> someone can help me clarify what is the correct solution may I employ, or
> if
> both solutions work fine according to the following requirements:
>
> Let see my example:
>
>
> Configure R1 so that it limits traffic to 8000k destined to all of its
> interfaces.
>
>
>
> ---------ETH0/0[ROUTER-1]ETH0/1-------
>
>
> eth0/0
> ip address 1.1.1.1 255.255.255.0
>
> eth 0/1
> ip address 2.2.2.2 255.255.255.0
>
> ****** SOLUTION 1:
>
> access-list 101 permit ip any host 1.1.1.1 access-list 101 permit ip any
> host 2.2.2.2
>
>
> int eth 0/0
> rate-limit input access-group 101 8000 1500 2000 conform-action transmit
> exceed-action drop
>
> int eth 0/1
> rate-limit input access-group 101 8000 1500 2000 conform-action transmit
> exceed-action drop
>
> *******SOLUTION 2:
>
> class-map control-plane-class
> match access-group 101
>
> policy-map control-plane-policy
> class control-plane-class
> police 8000 conform-action transmit exceed-action drop
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Tue Apr 01 2008 - 07:53:54 ART