Implementing Cisco Enterprise Advanced Routing and Services (ENARSI) — Question 270

The network administrator configured CoPP so that all routing protocol traffic toward the router CPU is limited to 1 mbps. All traffic that exceeds this limit must be dropped. The router is running BGP and OSPF. Management traffic for Telnet and SSH must be limited to 500 kbps.

access-list 100 permit tcp any any eq 179
access-list 100 permit tcp any any range 22 23
access-list 100 permit ospf any any
!
class-map CM-ROUTING
match access-group 100
class-map CM-MGMT
match access-group 100
!
policy-map PM-COPP
class CM-ROUTING
police 1000000 conform-action transmit
class CM-MGMT
police 500000 conform-action transmit
!
control-plane
service-policy output PM-COPP

No traffic is filtering through CoPP, which is resulting in high CPU utilization. Which configuration resolves the issue?

Answer options

• A. control-plane no service-policy output PM-COPP service-policy input PM-COPP
• B. no access-list 100 access-list 100 permit tcp any any eq 179 access-list 100 permit ospf any any access-list 101 permit tcp any any range 22 23 ! ! class-map CM-MGMT no match access-group 100 match access-group 101
• C. no access-list 100 access-list 100 permit tcp any any eq 179 access-list 100 permit ospf any any access-list 101 permit tcp any any range 22 23 ! ! class-map CM-MGMT no match access-group 100 match access-group 101 ! control-plane no service-policy output PM-COPP service-policy input PM-COPP
• D. No access-list 100 - access-list 100 permit tcp any any eq 179 access-list 100 permit tcp any any range eq 22 access-list 100 permit tcp any any range eq 23 access-list 100 permit ospf any any

Correct answer: C

Explanation

Option C is the correct answer because it ensures that the access lists are correctly configured to allow necessary traffic while also applying the appropriate service policy in the control-plane. Options A, B, and D either remove necessary access-list statements or fail to apply the service policy, which would not resolve the high CPU utilization issue.