Curious about 'hidden' access-lists on 4507

Answered Question
Sep 3rd, 2009

I am curious about the following:

If I do 'show run' on my 4507, I see no access-lists. Then if I do 'show access-list' I see some access-lists such as the one show below. Just wanted to confirm this is perhaps a system generated access-list and it is necessary or OK to leave it?

"...

Extended MAC access list system-cpp-dot1x

permit any host 0180.c200.0003

"...

Correct Answer by Giuseppe Larosa about 7 years 5 months ago

Hello Marlon,

this is related to control plane policing CPP a security feature to protect main cpu from denial of service attacks.

Hope to help

Giuseppe

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Giuseppe Larosa Thu, 09/03/2009 - 13:10

Hello Marlon,

this is related to control plane policing CPP a security feature to protect main cpu from denial of service attacks.

Hope to help

Giuseppe

Actions

This Discussion