Specifications

2-119

Catalyst 4500 Se ries S wit ch C is co IO S C om mand R efer ence —Re lease I OS XE 3 .3.0 XO(1 5.1 (1)XO)

OL_28738-01

Chapter 2 Cisco IOS Commands for the Catalyst 4500 Series Switches

control-plane

To enter control-plane configuration mode, which allows users to ass ociate or modify attr ibutes or

parameters (such as a service policy) that are associated with the control plane of the device, use the

control -pla ne command.

control -pla ne

Syntax Description This command has no arguments or keywords.

Defaults Default service police system-cpp-policy is attached.

Command Modes Global configura tion mode

Usage Guidelines After you enter the control-plane command, you can define control plane services for your rout e

processor. For example, you can assoc iate a ser vice po licy with the control pla ne to p olice all t raffic tha t

is destined to the control plane.

Examples These examples show how to configure trusted hos ts with source addresse s 10.1.1.1 and 10.1.1 .2 to

forward Telnet packets to the control plane without constraint, while allowing all remaining Telnet

packets to be policed at the specified rate:

Switch(config)# access-list 140 deny tcp host 10.1.1.1 any eq telnet

! Allow 10.1.1.2 trusted host traffic.

Switch(config)# access-list 140 deny tcp host 10.1.1.2 any eq telnet

! Rate limit all other Telnet traffic.

Switch(config)# access-list 140 permit tcp any any eq telnet

! Define class-map “telnet-class.”

Switch(config)# class-map telnet-class

Switch(config-cmap)# match access-group 140

Switch(config-cmap)# exit

Switch(config)# policy-map control-plane

Switch(config-pmap)# class telnet-class

Switch(config-pmap-c)# police 32000 1000 conform transmit exceed drop

Switch(config-pmap-c)# exit

Switch(config-pmap)# exit

! Define aggregate control plane service for the active Route Processor.

Switch(config)# macro global apply system-cpp

Switch(config)# control-plane

Switch(config-cp)# service-police input system-cpp-policy

Switch(config-cp)# exit