Explains control plane policing and provides guidance for configuring rate limits, per-interface and per-protocol policies, prefilters, and statistics to protect ACI switches from excessive or malicious traffic.
Control plane policing
Control plane policing (CoPP) protects switch control processors by classifying and rate-limiting traffic that is destined for the control plane.
CoPP prefilters
A control plane policing (CoPP) prefilter acts as an infrastructure access control list (iACL) for traffic sent to a leaf or spine switch CPU.