Which two advantages does CoPP have over receive path ACLs? (Choose two.)
A.
Only CoPP applies to IP packets and non-IP packets.
B.
Only CoPP applies to receive destination IP packets.
C.
A single instance of CoPP can be applied to all packets to the router, while rACLs require multiple
instances.
D.
Only CoPP can rate-limit packets.
Control Plane Policing – CoPP is the Cisco IOS-wide route processor protection mechanism. As illustrated in Figure 2, and similar to rACLs, CoPP is deployed once to the punt path of the router.
However, unlike rACLs that only apply to receive destination IP packets, CoPP applies to all
packets that punt to the route processor for handling. CoPP therefore covers not only receive
destination IP packets, it also exceptions IP packets and non-IP packets. In addition, CoPP is
implemented using the Modular QoS CLI (MQC) framework for policy construction. In this way, in
addition to simply permit and deny functions, specific packets may be permitted but rate-limited.
This behavior substantially improves the ability to define an effective CoPP policy. (Note: that
“Control Plane Policing” is something of a misnomer because CoPP generally protects the punt
path to the route processor and not solely the control plane.)
Reference: http://www.cisco.com/web/about/security/intelligence/coppwp_gs.html
0
0
C is also correct.
0
0