Curious about 'hidden' access-lists on 4507

[news2010a]

I am curious about the following:

If I do 'show run' on my 4507, I see no access-lists. Then if I do 'show access-list' I see some access-lists such as the one show below. Just wanted to confirm this is perhaps a system generated access-list and it is necessary or OK to leave it?

"...

Extended MAC access list system-cpp-dot1x

permit any host 0180.c200.0003

"...

[mattwilsonuk]

Do you see this command?

macro global apply system-cpp

Matt

[Giuseppe Larosa · Accepted solution]

Hello Marlon,

this is related to control plane policing CPP a security feature to protect main cpu from denial of service attacks.

Hope to help

Giuseppe