Solved: Curious about 'hidden' access-lists on 4507

news2010a · ‎09-03-2009

I am curious about the following:

If I do 'show run' on my 4507, I see no access-lists. Then if I do 'show access-list' I see some access-lists such as the one show below. Just wanted to confirm this is perhaps a system generated access-list and it is necessary or OK to leave it?

"...

Extended MAC access list system-cpp-dot1x

permit any host 0180.c200.0003

"...

Giuseppe Larosa · ‎09-03-2009

Hello Marlon,

this is related to control plane policing CPP a security feature to protect main cpu from denial of service attacks.

Hope to help

Giuseppe

View solution in original post

mattwilsonuk · ‎09-03-2009

Do you see this command?

macro global apply system-cpp

Matt

Giuseppe Larosa · ‎09-03-2009

Hello Marlon,

this is related to control plane policing CPP a security feature to protect main cpu from denial of service attacks.

Hope to help

Giuseppe