Control Plane Policing; Atom Set Atm Clp Bit Using A Policer - Cisco 10000 Series Configuration Manual

Chapter 6 Policing Traffic
Cisco IOS Release
Release 12.2(28)SB
Release 12.2(31)SB2
Usage Guidelines for the police percent Command
Percent-based policing supports two levels of policing if the parent policy map has only one class
defined: the class-default class. The parent policy does only match-any matching when applying the
class-default shaping rate.
Shaping affects the input and output policer. For example, if you configure a percent-based policer on
an input interface and the output interface has a nested policy attached, the policing percentage is based
on the outgoing shape rate.
You must explicitly enter the PIR when using percent-based policing.
Example
The following configuration polices Data traffic at 20 percent and sets the PIR to 25 percent.
Router(config)# policy-map Business
Router(config-pmap)# class Data
Router(config-pmap-c)# police percent 20 3 ms pir 25 10 ms

Control Plane Policing

The Cisco 10000 series router supports control plane policing in Cisco IOS Release 12.2(31)SB2 and
later releases. The Control Plane Policing feature allows you to configure a quality of service (QoS) filter
that manages the traffic flow of control plane packets. This allows you to protect the control plane of the router
against reconnaissance and denial-of-service (DoS) attacks. In this way, the control plane (CP) can help
maintain packet forwarding and protocol states despite an attack or heavy traffic load on the router or switch.
For more information, see the Control Plane Policing, Release 12.2(31)SB2 feature module.

AToM Set ATM CLP Bit Using a Policer

The AToM Set ATM CLP Bit Using a Policer feature enables you to police and mark inbound ATM
traffic before forwarding it onto Any Transport over MPLS (AToM) Layer 2 virtual private network
(VPN) pseudowire. Using this feature, you can configure the police command to set the ATM cell loss
priority (CLP) bit in the packet header. This bit indicates the drop priority of the ATM cell. During ATM
network congestion, the router discards ATM cells with the CLP bit set to 1 before discarding cells with
a CLP bit setting of 0.
OL-7433-09
Description
This command was enhanced on the PRE2 to allow you to configure two
traffic policing rates as a percentage: the committed information rate (CIR)
and the peak information rate (PIR)
This command was introduced on the PRE3 to allow you to police traffic on
the L2TP access concentrator (LAC) based on the value of a packet's IP
DSCP bits.
Cisco 10000 Series Router Quality of Service Configuration Guide
Control Plane Policing
6-13