
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public
Presentation_ID
38
IOS-XR LPTS – Secure the Control Plane
NPU 0
NPU 1
NPU 2
NPU 3
CPU CPU
Ingress
LC
RSP
OR
NPU on ingress LC identifies “for us” packets
Layer 3 packets use IP FIB
Layer 2 frames use various other lookup keys & match criteria
“For us” packets subject to preliminary Internal FIB (Pre-IFIB) lookup to
determine system destination
Pre-IFIB lookup: matches critical packets: routing protocols & L2 control protocols
Lookup Result: - Destination: “Local LC CPU”, “RSP CPU”, or “Drop”
- Divert priority, queue, and policing rate
Packets diverted to control plane policed by the NPU prior reaching CPU
Local Packet
Transport
Service (LPTS)
Policing
• CoPP
Comentarios a estos manuales