Curious about 'hidden' access-lists on 4507

Answered Question
Sep 3rd, 2009
User Badges:

I am curious about the following:

If I do 'show run' on my 4507, I see no access-lists. Then if I do 'show access-list' I see some access-lists such as the one show below. Just wanted to confirm this is perhaps a system generated access-list and it is necessary or OK to leave it?


"...

Extended MAC access list system-cpp-dot1x

permit any host 0180.c200.0003

"...

Correct Answer by Giuseppe Larosa about 7 years 9 months ago

Hello Marlon,


this is related to control plane policing CPP a security feature to protect main cpu from denial of service attacks.


Hope to help

Giuseppe


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
mattwilsonuk Thu, 09/03/2009 - 11:31
User Badges:

Do you see this command?


macro global apply system-cpp


Matt

Correct Answer
Giuseppe Larosa Thu, 09/03/2009 - 13:10
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,

    Founding Member

Hello Marlon,


this is related to control plane policing CPP a security feature to protect main cpu from denial of service attacks.


Hope to help

Giuseppe


Actions

This Discussion