CCNP—CoPP

Configuration

en
cont f
    # 1. ACL
    ip access-list extended SSH-ACL
      permit tcp 192.168.1.0 0.0.0.255 any eq 22
      exit

    # 2. class-map
    class-map CoPP
      match access-group name SSH-ACL
      exit

    # 3. policy-map
    policy-map CoPP-Policy
      class CoPP
        police 8000 conform-action transmit exceed-action drop violate-action drop
        exit

    control-plane
      service-policy input CoPP-Policy
      end
wr

Check

show access-list
show class-map
show policy-map [control-plane]