On Thu, Mar 31, 2016 at 08:29:07AM +0200, Gert Doering wrote: > > Pricing for the ASR920 is complicated due to hardware/software licenses > and models, but base list price of the ISR4451 is about 3x the base list > price of ASR920-12CZ. So if ASR920 works for the requirements, it seems > to be "the!" platform of choice. > > (Still waiting for someone to explain to me how control-plane protection > works on ASR920... is it 6500-style CoPP, ASR9k-style LPTS, or "we have > a fast CPU, we don't need this stuff!"-denial?) >
ASR 920 CoPP is somewhat like auto-copp flavor, except there isn't much you can configure. I believe you can only restrict/rate-limit supported protocols: http://www.cisco.com/c/en/us/td/docs/routers/asr920/configuration/guide/qos/qos-plcshp-xe-3-13s-asr920-book/qos-plcshp-xe-3-13s-asr920-book_chapter_011.html Last I checked (note that this was few IOS XE versions ago; this may have been improved since then), we couldn't actually deny/filter tcp port 22 (applying service-policy to control-plane didn't work well), but the box did seem to be rate limiting TermForUs traffic. I didn't look deeper though. James _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
