Control plane policing (CoPP) applies a set of rules to selectively block, allow, or rate-limit specific packets that need to be processed by the device for its normal functioning. CoPP is available as specific policer on certain series of high-end routers, such as the Cisco ASR series routers, to limit the packets that get to the CPU on the router. The same policies can be applied on the other series routers by using ACLs, and ensuring that the following functionality is provided:
- Receive packets only from the network interface address range.
- Receive SNMP messages only from the NOC subnet.
- Allow only those protocol packets to reach the router that are explicitly configured. For example, if OSPF is enabled, allow IP ...
