Hi Andrew,
Best thing I can think of is to configure some feature that is not supported in hardware...thus we'd have to punt all the traffic to the CPU. A few things you can try to accomplish this for this platform:
-Use GRE tunnels
-Use Route-map with deny entry in called ACL
-ACL w/ log keyword
Not many people want added latency to be a Feature