QuestionQ357

Infrastructure Security

Question Image

Refer to the exhibit. After the CoPP configuration is applied to the router, the control plane is heavily affected. Which command's removal reduces the impact on the control plane?

  • A access-list 120 permit tcp any gt 1024 eq bgp log
  • B access-list 120 permit ospf any
  • C access-list 120 permit udp any any eq pim-auto-rp
  • D access-list 120 permit eigrp any host 224.0.0.10
Explanation

The log keyword on an ACL entry causes matching packets to be logged, adding packet-processing and log-generation work to the device CPU. Cisco specifically recommends not using log in CoPP policy ACLs because ACL logging can heavily affect CPU resources. Removing the logged BGP permit entry eliminates that logging overhead.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!