300-320 · Question #63
What is one reason to implement Control Plane Policing?
The correct answer is B. protect the network device route processor from getting overloaded by rate limiting the incoming. Control Plane Policing (CoPP) rate-limits traffic directed at the router's control plane to protect the route processor from being overwhelmed by excessive or malicious traffic.
Question
What is one reason to implement Control Plane Policing?
Options
- Aallow OSPF routing protocol to advertise routes
- Bprotect the network device route processor from getting overloaded by rate limiting the incoming
- Callow network devices to generate and receive packets
- Dprotect the data plane packets
How the community answered
(28 responses)- A7% (2)
- B89% (25)
- C4% (1)
Why each option
Control Plane Policing (CoPP) rate-limits traffic directed at the router's control plane to protect the route processor from being overwhelmed by excessive or malicious traffic.
CoPP does not enable OSPF to advertise routes - OSPF functions independently; CoPP simply limits how many OSPF packets per second reach the CPU.
CoPP uses Cisco MQC policies applied to the control plane to police the rate of packets punted to the route processor, preventing CPU exhaustion from DoS attacks, traffic floods, or misconfigured devices. By limiting the rate of specific traffic classes (OSPF, BGP, ICMP, etc.) destined for the CPU, the router remains able to process legitimate control traffic and maintain routing stability. Without CoPP, a traffic flood can starve the route processor and cause routing protocol failures.
Network devices generate and receive packets regardless of CoPP - that is a fundamental function not governed by policing policy.
CoPP explicitly protects the control plane (CPU/route processor), not the data plane, which is handled by forwarding ASICs.
Concept tested: Control Plane Policing (CoPP) for CPU protection
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/qos_copp/configuration/xe-16/qos-copp-xe-16-book/qos-copp.html
Topics
Community Discussion
No community discussion yet for this question.