Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Control Plane Protection (Policing) configuration on Catalyst 3850

I need to block ICMP requests from being received by the switch. And there is no 'control-plane' configuration mode, which I was going to use for this.
How can I configure this feature or apply another for my purpose?

Everyone's tags (3)
1 REPLY
New Member

+1I'm just looking in to this

+1
I'm just looking in to this and have some questions on my own. The 3650 and 3860 seems to be missing the "control-plane" by design. There's some default settings on the box for control plane protection, that you can change. The command "cpp" in global mode configures some queues.  List the queues with:

show platform qos queue stats internal cpu policer

There no specific ICMP request queue, not that i see anyway. Sorry!
Maybe the ICMP GEN is the one that you could look in to....but what else is then dropped?

I can't find any more information about this. If i disable something, is it dropped or just in some default queue? if i set police 0 (zero) is the queue dropping everything? What stuff is put in thees detained queues....

468
Views
0
Helpful
1
Replies