ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 560 - 300-410 discussion

Report
Export

The network administrator configured CoPP so that all SNMP traffic from Cisco Prime located at 192.168.1.11 toward the router CPU is limited to 1000 kbps. Any traffic that exceeds this limit must be dropped.

access-list 100 permit udp any any eq 161

!

class-map CM-SNMP

match access-group 100

!

policy-map PM-COPP

class CM-SNMP

police 1000 conform-action transmit

!

control-plane

service-policy input PM-COPP

The network administrator is not getting the desired result for the SNMP traffic and SNMP traffic is getting dropped frequently. Which set of configurations resolves the issue?

A.

no access-list 100 access-list 100 permit tcp host 192.168.1.11 any eq 161

Answers
A.

no access-list 100 access-list 100 permit tcp host 192.168.1.11 any eq 161

B.

no access-list 100 access-list 100 permit udp host 192.168.1.11 any eq 161 ! policy-map PM-COPP class CM-SNMP no police 1000 conform-action transmit police 1000000 conform-action transmit ! control-plane no service-policy input PM-COPP ! interface E 0/0 service-policy input PM-COPP ! interface E 0/1 service-policy input PM-COPP

Answers
B.

no access-list 100 access-list 100 permit udp host 192.168.1.11 any eq 161 ! policy-map PM-COPP class CM-SNMP no police 1000 conform-action transmit police 1000000 conform-action transmit ! control-plane no service-policy input PM-COPP ! interface E 0/0 service-policy input PM-COPP ! interface E 0/1 service-policy input PM-COPP

C.

no access-list 100 access-list 100 permit udp host 192.168.1.11 any eq 161 ! policy-map PM-COPP class CM-SNMP no police 1000 conform-action transmit police 1000000 conform-action transmit

Answers
C.

no access-list 100 access-list 100 permit udp host 192.168.1.11 any eq 161 ! policy-map PM-COPP class CM-SNMP no police 1000 conform-action transmit police 1000000 conform-action transmit

D.

policy-map PM-COPP class CM-SNMP no police 1000 conform-action transmit police 1000000 conform-action transmit

Answers
D.

policy-map PM-COPP class CM-SNMP no police 1000 conform-action transmit police 1000000 conform-action transmit

Suggested answer: C

Explanation:

In the context of Control Plane Policing (CoPP) in Cisco devices, the rate limit is specified in bits per second (bps), not kilobits per second (kbps). Therefore, a limit of 1000 kbps should indeed be entered as 1,000,000 bps in the CoPP configuration.

Also, the access list should be configured to match the specific SNMP traffic from the Cisco Prime IP address (192.168.1.11), as you correctly pointed out.

Here's the corrected configuration:

no access-list 100

access-list 100 permit udp host 192.168.1.11 any eq 161

!

policy-map PM-COPP

class CM-SNMP

no police 1000 conform-action transmit

police 1000000 conform-action transmit

This configuration ensures that only the SNMP traffic from Cisco Prime is policed and any excess traffic is dropped, preventing the router's CPU from being overwhelmed.

asked 07/10/2024
Hernan Rojas
48 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first