Percentage of what? The entire control-plane? There¹s no logical limit to the control-plane, just an effective one, so I¹m not surprised that this doesn¹t work. Stick with a rate for CoPP. That¹s my advice.
On 6/14/09 9:57 AM, "Willians Barboza" <[email protected]> wrote: > Hi all, > > I have a doubt... I"ve found the following document > > http://www.cisco.com/en/US/docs/ios/12_2sb/feature/guide/cpp.html#wp1134060 > > There, it shows how to configure police rate for using on control plane. > > Then, I tried do configure a policy-map to police ssh to 10%. > > access-list 100 permit tcp any any eq 22 > > class-map match-all SSH > match access-group 100 > > policy-map SSH > class SSH > police rate percent 10 > > control-plane host > HOWEVER, when I try to apply the service policy > service-policy input SSH > cir must fall between 8000 and 2000000000 > cir must fall between 8000 and 2000000000 > error: failed to install policy map SSH > > So, is there a way to limit ssh trafic to control place to a certain > percentage??? > > Thanks Cheers, Jared Scrivener CCIE3 #16983 (R&S, Security, SP), CISSP Sr. Technical Instructor - IPexpert, Inc. URL: http://www.IPexpert.com Telephone: +1.810.326.1444 Fax: +1.810.454.0130 Mailto: [email protected]
