Control Plane Policing

CoPP prioritizes traffic handled by the CPU and also serves to protect the device from Denial-of-Service (DoS) attacks.

Aruba OS now supports policing the different CPU traffic classes based on a user configurable set of rate limits. The feature is disabled by default and can be enabled using a set of CoPP CLI commands, which can do either of the following:

• Apply a default rate-limit profile to all traffic classes via a single command

• Apply a rate limit on a per-traffic class