Advertisement
Guest User

Untitled

a guest
Nov 2nd, 2014
934
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 16.20 KB | None | 0 0
  1. DC1-N7K1# show run all | section control-plane|copp
  2. ip access-list copp-system-p-acl-bgp
  3. 10 permit tcp any gt 1024 any eq bgp
  4. 20 permit tcp any eq bgp any gt 1024
  5. ipv6 access-list copp-system-p-acl-bgp6
  6. 10 permit tcp any gt 1024 any eq bgp
  7. 20 permit tcp any eq bgp any gt 1024
  8. ip access-list copp-system-p-acl-cts
  9. 10 permit tcp any any eq 64999
  10. 20 permit tcp any eq 64999 any
  11. ip access-list copp-system-p-acl-dhcp
  12. 10 permit udp any eq bootpc any
  13. 20 permit udp any neq bootps any eq bootps
  14. ip access-list copp-system-p-acl-dhcp-relay-response
  15. 10 permit udp any eq bootps any
  16. 20 permit udp any any eq bootpc
  17. ipv6 access-list copp-system-p-acl-dhcp6
  18. 10 permit udp any eq 546 any
  19. 20 permit udp any neq 547 any eq 547
  20. ipv6 access-list copp-system-p-acl-dhcp6-relay-response
  21. 10 permit udp any eq 547 any
  22. 20 permit udp any any eq 546
  23. ip access-list copp-system-p-acl-eigrp
  24. 10 permit eigrp any any
  25. ipv6 access-list copp-system-p-acl-eigrp6
  26. 10 permit eigrp any any
  27. ip access-list copp-system-p-acl-ftp
  28. 10 permit tcp any any eq ftp-data
  29. 20 permit tcp any any eq ftp
  30. 30 permit tcp any eq ftp-data any
  31. 40 permit tcp any eq ftp any
  32. ip access-list copp-system-p-acl-glbp
  33. 10 permit udp any eq 3222 224.0.0.0/24 eq 3222
  34. ip access-list copp-system-p-acl-hsrp
  35. 10 permit udp any 224.0.0.2/32 eq 1985
  36. 20 permit udp any 224.0.0.102/32 eq 1985
  37. ipv6 access-list copp-system-p-acl-hsrp6
  38. 10 permit udp any ff02::66/128 eq 2029
  39. ip access-list copp-system-p-acl-icmp
  40. 10 permit icmp any any echo
  41. 20 permit icmp any any echo-reply
  42. ipv6 access-list copp-system-p-acl-icmp6
  43. 10 permit icmp any any echo-request
  44. 20 permit icmp any any echo-reply
  45. ip access-list copp-system-p-acl-igmp
  46. 10 permit igmp any 224.0.0.0/3
  47. ip access-list copp-system-p-acl-lisp
  48. 10 permit udp any any eq 4342
  49. 20 permit udp any eq 4342 any
  50. ipv6 access-list copp-system-p-acl-lisp6
  51. 10 permit udp any any eq 4342
  52. 20 permit udp any eq 4342 any
  53. mac access-list copp-system-p-acl-mac-cdp-udld-vtp
  54. 10 permit any 0100.0ccc.cccc 0000.0000.0000
  55. mac access-list copp-system-p-acl-mac-cfsoe
  56. 10 permit any 0180.c200.000e 0000.0000.0000 0x8843
  57. 20 permit any 0180.c200.000e 0000.0000.0000
  58. mac access-list copp-system-p-acl-mac-dot1x
  59. 10 permit any 0180.c200.0003 0000.0000.0000 0x888e
  60. mac access-list copp-system-p-acl-mac-fabricpath-isis
  61. 10 permit any 0180.c200.0041 0000.0000.0000
  62. mac access-list copp-system-p-acl-mac-fcoe
  63. 10 permit any any 0x8906
  64. 20 permit any any 0x8914
  65. mac access-list copp-system-p-acl-mac-flow-control
  66. 10 permit any 0180.c200.0001 0000.0000.0000 0x8808
  67. mac access-list copp-system-p-acl-mac-l2-tunnel
  68. 10 permit any any 0x8840
  69. mac access-list copp-system-p-acl-mac-l2pt
  70. 10 permit any 0100.0ccd.cdd0 0000.0000.0000
  71. mac access-list copp-system-p-acl-mac-l3-isis
  72. 10 permit any 0180.c200.0015 0000.0000.0000
  73. 20 permit any 0180.c200.0014 0000.0000.0000
  74. 30 permit any 0900.2b00.0005 0000.0000.0000
  75. mac access-list copp-system-p-acl-mac-lacp
  76. 10 permit any 0180.c200.0002 0000.0000.0000 0x8809
  77. mac access-list copp-system-p-acl-mac-lldp
  78. 10 permit any 0180.c200.000e 0000.0000.0000 0x88cc
  79. mac access-list copp-system-p-acl-mac-otv-isis
  80. 10 permit any 0100.0cdf.dfdf 0000.0000.0000
  81. mac access-list copp-system-p-acl-mac-sdp-srp
  82. 10 permit any 0180.c200.000e 0000.0000.0000 0x3401
  83. mac access-list copp-system-p-acl-mac-stp
  84. 10 permit any 0100.0ccc.cccd 0000.0000.0000
  85. 20 permit any 0180.c200.0000 0000.0000.0000
  86. mac access-list copp-system-p-acl-mac-undesirable
  87. 10 permit any any
  88. ipv6 access-list copp-system-p-acl-mld
  89. 10 permit icmp any any mld-query
  90. 20 permit icmp any any mld-report
  91. 30 permit icmp any any mld-reduction
  92. 40 permit icmp any any mldv2
  93. ip access-list copp-system-p-acl-mpls-ldp
  94. 10 permit udp any eq 646 any eq 646
  95. 20 permit tcp any any eq 646
  96. 30 permit tcp any eq 646 any
  97. ip access-list copp-system-p-acl-mpls-oam
  98. 10 permit udp any eq 3503 any
  99. ip access-list copp-system-p-acl-mpls-rsvp
  100. 10 permit 46 any any
  101. ip access-list copp-system-p-acl-msdp
  102. 10 permit tcp any gt 1024 any eq 639
  103. 20 permit tcp any eq 639 any gt 1024
  104. ipv6 access-list copp-system-p-acl-ndp
  105. 10 permit icmp any any router-solicitation
  106. 20 permit icmp any any router-advertisement
  107. 30 permit icmp any any redirect
  108. 40 permit icmp any any nd-ns
  109. 50 permit icmp any any nd-na
  110. ip access-list copp-system-p-acl-ntp
  111. 10 permit udp any any eq ntp
  112. 20 permit udp any eq ntp any
  113. ipv6 access-list copp-system-p-acl-ntp6
  114. 10 permit udp any any eq ntp
  115. 20 permit udp any eq ntp any
  116. ip access-list copp-system-p-acl-ospf
  117. 10 permit ospf any any
  118. ipv6 access-list copp-system-p-acl-ospf6
  119. 10 permit 89 any any
  120. ip access-list copp-system-p-acl-otv-as
  121. 10 permit udp any any eq 8472
  122. ip access-list copp-system-p-acl-pim
  123. 10 permit pim any 224.0.0.0/24
  124. 20 permit udp any any eq pim-auto-rp
  125. 30 permit ip any 224.0.0.13/32
  126. ip access-list copp-system-p-acl-pim-mdt-join
  127. 10 permit udp any 224.0.0.13/32
  128. ip access-list copp-system-p-acl-pim-reg
  129. 10 permit pim any any
  130. ipv6 access-list copp-system-p-acl-pim6
  131. 10 permit pim any ff02::d/128
  132. 20 permit udp any any eq pim-auto-rp
  133. ipv6 access-list copp-system-p-acl-pim6-reg
  134. 10 permit pim any any
  135. ip access-list copp-system-p-acl-radius
  136. 10 permit udp any any eq 1812
  137. 20 permit udp any any eq 1813
  138. 30 permit udp any any eq 1645
  139. 40 permit udp any any eq 1646
  140. 50 permit udp any eq 1812 any
  141. 60 permit udp any eq 1813 any
  142. 70 permit udp any eq 1645 any
  143. 80 permit udp any eq 1646 any
  144. ipv6 access-list copp-system-p-acl-radius6
  145. 10 permit udp any any eq 1812
  146. 20 permit udp any any eq 1813
  147. 30 permit udp any any eq 1645
  148. 40 permit udp any any eq 1646
  149. 50 permit udp any eq 1812 any
  150. 60 permit udp any eq 1813 any
  151. 70 permit udp any eq 1645 any
  152. 80 permit udp any eq 1646 any
  153. ip access-list copp-system-p-acl-rip
  154. 10 permit udp any 224.0.0.0/24 eq rip
  155. ipv6 access-list copp-system-p-acl-rip6
  156. 10 permit udp any ff02::9/64 eq 521
  157. ip access-list copp-system-p-acl-rise
  158. 10 permit tcp any range 5000 5001 any
  159. ipv6 access-list copp-system-p-acl-rise6
  160. 10 permit tcp any range 5000 5001 any
  161. ip access-list copp-system-p-acl-sftp
  162. 10 permit tcp any any eq 115
  163. 20 permit tcp any eq 115 any
  164. ip access-list copp-system-p-acl-snmp
  165. 10 permit udp any any eq snmp
  166. 20 permit udp any any eq snmptrap
  167. ip access-list copp-system-p-acl-ssh
  168. 10 permit tcp any any eq 22
  169. 20 permit tcp any eq 22 any
  170. ipv6 access-list copp-system-p-acl-ssh6
  171. 10 permit tcp any any eq 22
  172. 20 permit tcp any eq 22 any
  173. ip access-list copp-system-p-acl-tacacs
  174. 10 permit tcp any any eq tacacs
  175. 20 permit tcp any eq tacacs any
  176. ipv6 access-list copp-system-p-acl-tacacs6
  177. 10 permit tcp any any eq tacacs
  178. 20 permit tcp any eq tacacs any
  179. ip access-list copp-system-p-acl-telnet
  180. 10 permit tcp any any eq telnet
  181. 20 permit tcp any any eq 107
  182. 30 permit tcp any eq telnet any
  183. 40 permit tcp any eq 107 any
  184. ipv6 access-list copp-system-p-acl-telnet6
  185. 10 permit tcp any any eq telnet
  186. 20 permit tcp any any eq 107
  187. 30 permit tcp any eq telnet any
  188. 40 permit tcp any eq 107 any
  189. ip access-list copp-system-p-acl-tftp
  190. 10 permit udp any any eq tftp
  191. 20 permit udp any any eq 1758
  192. 30 permit udp any eq tftp any
  193. 40 permit udp any eq 1758 any
  194. ipv6 access-list copp-system-p-acl-tftp6
  195. 10 permit udp any any eq tftp
  196. 20 permit udp any any eq 1758
  197. 30 permit udp any eq tftp any
  198. 40 permit udp any eq 1758 any
  199. ip access-list copp-system-p-acl-traceroute
  200. 10 permit icmp any any ttl-exceeded
  201. 20 permit icmp any any port-unreachable
  202. 30 permit udp any any range 33434 33534
  203. ip access-list copp-system-p-acl-undesirable
  204. 10 permit udp any any eq 1434
  205. ip access-list copp-system-p-acl-vpc
  206. 10 permit udp any any eq 3200
  207. ip access-list copp-system-p-acl-vrrp
  208. 10 permit ip any 224.0.0.18/32
  209. ipv6 access-list copp-system-p-acl-vrrp6
  210. 10 permit ipv6 any ff02::12/128
  211. ip access-list copp-system-p-acl-wccp
  212. 10 permit udp any eq 2048 any eq 2048
  213. control-plane
  214. scale-factor 1.00 module 1
  215. scale-factor 1.00 module 2
  216. scale-factor 1.00 module 3
  217. scale-factor 1.00 module 4
  218. scale-factor 1.00 module 5
  219. scale-factor 1.00 module 6
  220. scale-factor 1.00 module 7
  221. scale-factor 1.00 module 8
  222. scale-factor 1.00 module 9
  223. scale-factor 1.00 module 10
  224. class-map type control-plane match-any copp-system-p-class-critical
  225. match access-group name copp-system-p-acl-bgp
  226. match access-group name copp-system-p-acl-bgp
  227. match access-group name copp-system-p-acl-rip
  228. match access-group name copp-system-p-acl-vpc
  229. match access-group name copp-system-p-acl-bgp6
  230. match access-group name copp-system-p-acl-lisp
  231. match access-group name copp-system-p-acl-ospf
  232. match access-group name copp-system-p-acl-rip6
  233. match access-group name copp-system-p-acl-rise
  234. match access-group name copp-system-p-acl-eigrp
  235. match access-group name copp-system-p-acl-lisp6
  236. match access-group name copp-system-p-acl-ospf6
  237. match access-group name copp-system-p-acl-rise6
  238. match access-group name copp-system-p-acl-eigrp6
  239. match access-group name copp-system-p-acl-otv-as
  240. match access-group name copp-system-p-acl-mac-l2pt
  241. match access-group name copp-system-p-acl-mpls-ldp
  242. match access-group name copp-system-p-acl-mpls-oam
  243. match access-group name copp-system-p-acl-mpls-rsvp
  244. match access-group name copp-system-p-acl-mac-l3-isis
  245. match access-group name copp-system-p-acl-mac-otv-isis
  246. match access-group name copp-system-p-acl-mac-fabricpath-isis
  247. class-map type control-plane match-any copp-system-p-class-exception
  248. match exception ip option
  249. match exception ip icmp unreachable
  250. match exception ipv6 option
  251. match exception ipv6 icmp unreachable
  252. class-map type control-plane match-any copp-system-p-class-fcoe
  253. match access-group name copp-system-p-acl-mac-fcoe
  254. match access-group name copp-system-p-acl-mac-fcoe
  255. class-map type control-plane match-any copp-system-p-class-important
  256. match access-group name copp-system-p-acl-cts
  257. match access-group name copp-system-p-acl-cts
  258. match access-group name copp-system-p-acl-glbp
  259. match access-group name copp-system-p-acl-hsrp
  260. match access-group name copp-system-p-acl-vrrp
  261. match access-group name copp-system-p-acl-wccp
  262. match access-group name copp-system-p-acl-hsrp6
  263. match access-group name copp-system-p-acl-vrrp6
  264. match access-group name copp-system-p-acl-mac-lldp
  265. match access-group name copp-system-p-acl-mac-flow-control
  266. class-map type control-plane match-any copp-system-p-class-l2-default
  267. match access-group name copp-system-p-acl-mac-undesirable
  268. match access-group name copp-system-p-acl-mac-undesirable
  269. class-map type control-plane match-any copp-system-p-class-l2-unpoliced
  270. match access-group name copp-system-p-acl-mac-stp
  271. match access-group name copp-system-p-acl-mac-stp
  272. match access-group name copp-system-p-acl-mac-lacp
  273. match access-group name copp-system-p-acl-mac-cfsoe
  274. match access-group name copp-system-p-acl-mac-sdp-srp
  275. match access-group name copp-system-p-acl-mac-l2-tunnel
  276. match access-group name copp-system-p-acl-mac-cdp-udld-vtp
  277. class-map type control-plane match-any copp-system-p-class-management
  278. match access-group name copp-system-p-acl-ftp
  279. match access-group name copp-system-p-acl-ftp
  280. match access-group name copp-system-p-acl-ntp
  281. match access-group name copp-system-p-acl-ssh
  282. match access-group name copp-system-p-acl-ntp6
  283. match access-group name copp-system-p-acl-sftp
  284. match access-group name copp-system-p-acl-snmp
  285. match access-group name copp-system-p-acl-ssh6
  286. match access-group name copp-system-p-acl-tftp
  287. match access-group name copp-system-p-acl-tftp6
  288. match access-group name copp-system-p-acl-radius
  289. match access-group name copp-system-p-acl-tacacs
  290. match access-group name copp-system-p-acl-telnet
  291. match access-group name copp-system-p-acl-radius6
  292. match access-group name copp-system-p-acl-tacacs6
  293. match access-group name copp-system-p-acl-telnet6
  294. class-map type control-plane match-any copp-system-p-class-monitoring
  295. match access-group name copp-system-p-acl-icmp
  296. match access-group name copp-system-p-acl-icmp
  297. match access-group name copp-system-p-acl-icmp6
  298. match access-group name copp-system-p-acl-traceroute
  299. class-map type control-plane match-any copp-system-p-class-multicast-host
  300. match access-group name copp-system-p-acl-mld
  301. match access-group name copp-system-p-acl-mld
  302. match access-group name copp-system-p-acl-igmp
  303. class-map type control-plane match-any copp-system-p-class-multicast-router
  304. match access-group name copp-system-p-acl-pim
  305. match access-group name copp-system-p-acl-pim
  306. match access-group name copp-system-p-acl-msdp
  307. match access-group name copp-system-p-acl-pim6
  308. match access-group name copp-system-p-acl-pim-reg
  309. match access-group name copp-system-p-acl-pim6-reg
  310. match access-group name copp-system-p-acl-pim-mdt-join
  311. class-map type control-plane match-any copp-system-p-class-ndp
  312. match access-group name copp-system-p-acl-ndp
  313. match access-group name copp-system-p-acl-ndp
  314. class-map type control-plane match-any copp-system-p-class-normal
  315. match access-group name copp-system-p-acl-mac-dot1x
  316. match access-group name copp-system-p-acl-mac-dot1x
  317. class-map type control-plane match-any copp-system-p-class-normal-dhcp
  318. match access-group name copp-system-p-acl-dhcp
  319. match access-group name copp-system-p-acl-dhcp
  320. match access-group name copp-system-p-acl-dhcp6
  321. class-map type control-plane match-any copp-system-p-class-normal-dhcp-relay-response
  322. match access-group name copp-system-p-acl-dhcp-relay-response
  323. match access-group name copp-system-p-acl-dhcp-relay-response
  324. match access-group name copp-system-p-acl-dhcp6-relay-response
  325. class-map type control-plane match-any copp-system-p-class-redirect
  326. match redirect arp-inspect
  327. class-map type control-plane match-any copp-system-p-class-undesirable
  328. match access-group name copp-system-p-acl-undesirable
  329. match access-group name copp-system-p-acl-undesirable
  330. policy-map type control-plane copp-system-p-policy-strict
  331. class copp-system-p-class-critical
  332. class copp-system-p-class-critical
  333. set cos 7
  334. police cir 36000 kbps bc 250 ms conform transmit violate drop
  335. class copp-system-p-class-important
  336. set cos 6
  337. police cir 1400 kbps bc 1500 ms conform transmit violate drop
  338. class copp-system-p-class-multicast-router
  339. set cos 6
  340. police cir 2600 kbps bc 1000 ms conform transmit violate drop
  341. class copp-system-p-class-management
  342. set cos 2
  343. police cir 10000 kbps bc 250 ms conform transmit violate drop
  344. class copp-system-p-class-multicast-host
  345. set cos 1
  346. police cir 1000 kbps bc 1000 ms conform transmit violate drop
  347. class copp-system-p-class-normal
  348. set cos 1
  349. police cir 680 kbps bc 250 ms conform transmit violate drop
  350. class copp-system-p-class-ndp
  351. set cos 6
  352. police cir 680 kbps bc 250 ms conform transmit violate drop
  353. class copp-system-p-class-normal-dhcp
  354. set cos 1
  355. police cir 1500 kbps bc 250 ms conform transmit violate drop
  356. class copp-system-p-class-normal-dhcp-relay-response
  357. set cos 1
  358. police cir 1800 kbps bc 500 ms conform transmit violate drop
  359. class copp-system-p-class-redirect
  360. set cos 1
  361. police cir 280 kbps bc 250 ms conform transmit violate drop
  362. class copp-system-p-class-exception
  363. set cos 1
  364. police cir 360 kbps bc 250 ms conform transmit violate drop
  365. class copp-system-p-class-monitoring
  366. set cos 1
  367. police cir 130 kbps bc 1000 ms conform transmit violate drop
  368. class copp-system-p-class-l2-unpoliced
  369. police cir 8 gbps bc 5 mbytes conform transmit violate transmit
  370. class copp-system-p-class-undesirable
  371. set cos 0
  372. police cir 32 kbps bc 250 ms conform drop violate drop
  373. class copp-system-p-class-fcoe
  374. set cos 6
  375. police cir 1060 kbps bc 1000 ms conform transmit violate drop
  376. class copp-system-p-class-l2-default
  377. police cir 100 kbps bc 250 ms conform transmit violate drop
  378. control-plane
  379. service-policy input copp-system-p-policy-strict
  380. service-policy input copp-system-p-policy-strict
  381. copp profile strict
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement