300-410考题！ 这道题选什么。

猫腻哇

The network administrator configured CoPP so that all HTTP and HTTPS traffic from the administrator device located at 172.16 1.99 toward the router CPU is limited to 500 kbps. Any traffic that exceeds this limit must be dropped.
access-list 100 permit ip host 172.16.1.99 any
- ~( z) j! Q( q!
class-map CM-ADMIN
. N, q( X4 y7 x5 U* |( Jmatch access-group 100
0 \1 J$ }( M% v; R1 n: N: @!
& h9 o8 B8 w5 X' l" c5 upolicy-map PM-COPP
8 a% h" s$ e/ q6 ?class CM-ADMIN
- d2 L; B  n* P% T7 Gpolice 500000 conform-action transmit
!
5 {2 ^/ b( l9 Kinterface E0/0
* Z! U  W: U/ Z- Tservice-policy input PM-COPP
CoPP failed to capture the desired traffic and the CPU load is getting higher.
Which two configurations resolve the issue? (Choose two.)
7 ^1 X8 h6 O" v# aA. interface E0/0
no service-policy input PM-COPP
!
control-plane
service-policy input PM-COPP
- e; x% p% B* B) Q
B. policy-map PM-COPP
class CM-ADMIN
no police 500000 conform-action transmit
police 500 conform-action transmit
0 K9 p! M2 B( a0 b) s; L!
9 c6 n9 |0 ?# Ycontrol-plane
' q* X3 z# w( u( _. |0 h. ^  kservice-policy input PM-COPP
6 L* o5 [  N  m* d4 c& [
/ m3 {3 M; _8 G5 A# y; z9 `C. no access-list 100
access-list 100 permit tcp host 172.16.1.99 any eq 80
' M( V6 _: ]. b, U5 j
3 U2 V$ V" b  k6 aD. no access-list 100
access-list 100 permit tcp host 172.16.1.99 any eq 80
access-list 100 permit tcp host 172.16.1.99 any eq 443

1 q+ p/ ^: _  M/ ], L8 n" RE. policy-map PM-COPP
; i6 F' e6 C9 X# j7 n! `. s; c0 Q0 Bclass CM-ADMIN
no police 500000 conform-action transmit
police 500 conform-action transmit
% B4 L5 Z9 F  X  n; ~. p4 X

henry2c20

我觉得是A、D。B和E一定错,因为police 的单位是bps,,,500是错的 ,,而C 沒HTTPS 也是错

tianlaodadas

( T" _! d& e/ g% P% p' j
答案AD，
! ^, _" {7 t- t' k9 J0 g# O7 x知识点：1、CoPP是在是在control plane下调用，不是在接口下调用，方向只能是in。针对全局送往CPU的流量进行调度； 2、题目中要求是HTTP和HTTPS流量，所以ACL需要精确匹配
policy-map PM-COPP
class CM-ADMIN
   police 500000 conform-action transmit     
: }% S  H9 |9 s这段配置是没问题的，单位是bit，即限制为500KB   //可以用模拟器验证

flymaxaway

wl52070

根据题库，选AD

山姆

請問樓主目前是看哪組題庫？可以提供嗎謝謝

jassonyip

AD，其他不是；配置的速率不对，就是抓包信息不完整。

joekwan

it should be AD

joekwan

should be AD

strickl1

tianlaodadas 发表于 2022-5-13 14:16
% |6 Z+ z: D( C3 a5 e答案AD，
7 `2 E; e; s; P$ D# p知识点：1、CoPP是在是在control plane下调用，不是在接口下调用，方向只能是in。针对全局送往CP ...

- w$ l( N4 ^5 I3 F: E謝謝大佬分享

volume1989

感谢分享

ztbit

AD
7 ?3 }3 y) t6 v6 ]: d5 E# }  ~又有被匹配的流量，COPP 不处理，COPP可以IN 也可以 OUT
4 r9 i" R9 K) L# lPOLICING CIR 50OK 这里没有对EXCEED流量 配置，题目说明了过量流量过滤，(POLICING 也可以有PIR,擦双桶 PIR,MD!)

sche

楼上答案正解。AD。但是COPP是针对流量发送到control-plane的保护，所以是input，不包括本设备发出的流量进行限制。