Dell PowerEdge FN I/O Module Configuration Guide 9.10(0.0)

This section lists the commands necessary to create and enable the service-policies for CoPP.

1. Create a Layer 2 extended ACL for control-plane traffic policing for a particular protocol. CONFIGURATION mode mac access-list extended name cpu-qos permit {arp | frrp | gvrp | isis | lacp | lldp | stp}
2. Create a Layer 3 extended ACL for control-plane traffic policing for a particular protocol. CONFIGURATION mode ip access-list extended name cpu-qos permit {bgp | dhcp | dhcp-relay | ftp | icmp | igmp | msdp | ntp | ospf | pim | ip | ssh | telnet | vrrp}
3. Create an IPv6 ACL for control-plane traffic policing for a particular protocol. CONFIGURATION mode ipv6 access-list name cpu-qos permit {bgp | icmp | vrrp}
4. Create a QoS input policy for the router and assign the policing. CONFIGURATION mode qos-policy-input name cpu-qos rate-police
5. Create a QoS class map to differentiate the control-plane traffic and assign to an ACL. CONFIGURATION mode class-map match-any name cpu-qos match {ip | mac | ipv6} access-group name
6. Create a QoS input policy map to match to the class-map and qos-policy for each desired protocol. CONFIGURATION mode policy-map-input name cpu-qos class-map name qos-policy name
7. Enter Control Plane mode. CONFIGURATION mode control-plane-cpuqos
8. Assign the protocol based the service policy on the control plane. Enabling this command on a port-pipe automatically enables the ACL and QoS rules creates with the cpu-qos keyword. CONTROL-PLANE mode service-policy rate-limit-protocols

Dell(conf)#ip access-list extended ospf cpu-qos
                                 Dell(conf-ip-acl-cpuqos)#permit ospf
                                 Dell(conf-ip-acl-cpuqos)#exit
                                 
                                 Dell(conf)#ip access-list extended bgp cpu-qos
                                 Dell(conf-ip-acl-cpuqos)#permit bgp
                                 Dell(conf-ip-acl-cpuqos)#exit
                                 
                                 Dell(conf)#mac access-list extended lacp cpu-qos
                                 Dell(conf-mac-acl-cpuqos)#permit lacp
                                 Dell(conf-mac-acl-cpuqos)#exit
                                 
                                 Dell(conf)#ipv6 access-list ipv6-icmp cpu-qos
                                 Dell(conf-ipv6-acl-cpuqos)#permit icmp
                                 Dell(conf-ipv6-acl-cpuqos)#exit
                                 
                                 Dell(conf)#ipv6 access-list ipv6-vrrp cpu-qos
                                 Dell(conf-ipv6-acl-cpuqos)#permit vrrp
                                 Dell(conf-ipv6-acl-cpuqos)#exit
                              

Dell(conf)#qos-policy-in rate_limit_200k cpu-qos
                                 Dell(conf-in-qos-policy-cpuqos)#rate-police 200 40 peak 500 40
                                 Dell(conf-in-qos-policy-cpuqos)#exit
                                 
                                 Dell(conf)#qos-policy-in rate_limit_400k cpu-qos
                                 Dell(conf-in-qos-policy-cpuqos)#rate-police 400 50 peak 600 50
                                 Dell(conf-in-qos-policy-cpuqos)#exit
                                 
                                 Dell(conf)#qos-policy-in rate_limit_500k cpu-qos
                                 Dell(conf-in-qos-policy-cpuqos)#rate-police 500 50 peak 1000 50
                                 Dell(conf-in-qos-policy-cpuqos)#exit
                              

Dell(conf)#class-map match-any class_ospf cpu-qos
                                 Dell(conf-class-map-cpuqos)#match ip access-group ospf
                                 Dell(conf-class-map-cpuqos)#exit
                                 
                                 Dell(conf)#class-map match-any class_bgp cpu-qos
                                 Dell(conf-class-map-cpuqos)#match ip access-group bgp
                                 Dell(conf-class-map-cpuqos)#exit
                                 
                                 Dell(conf)#class-map match-any class_lacp cpu-qos
                                 Dell(conf-class-map-cpuqos)#match mac access-group lacp
                                 Dell(conf-class-map-cpuqos)#exit
                                 
                                 Dell(conf)#class-map match-any class-ipv6-icmp cpu-qos
                                 Dell(conf-class-map-cpuqos)#match ipv6 access-group ipv6-icmp
                                 Dell(conf-class-map-cpuqos)#exit
                              

Dell(conf)#policy-map-input egressFP_rate_policy cpu-qos
                                 Dell(conf-policy-map-in-cpuqos)#class-map class_ospf qos-policy rate_limit_500k
                                 Dell(conf-policy-map-in-cpuqos)#class-map class_bgp qos-policy rate_limit_400k
                                 Dell(conf-policy-map-in-cpuqos)#class-map class_lacp qos-policy rate_limit_200k
                                 Dell(conf-policy-map-in-cpuqos)#class-map class-ipv6 qos-policy rate_limit_200k
                                 Dell(conf-policy-map-in-cpuqos)#exit
                              

Dell(conf)#control-plane-cpuqos
                                 Dell(conf-control-cpuqos)#service-policy rate-limit-protocols egressFP_rate_policy
                                 Dell(conf-control-cpuqos)#exit