NOTE:

Default settings for CoPP in this page is only applicable for N2224PX-ON/N2248X-ON/N3208PX-ON.
CoPP configures control policy of the traffic from the ASIC to CPU. It is a very sensitive process of the whole switch OS. Any incorrect setting could impact the stability or could even paralyze the normal network operation. It is therefore highly recommended to KEEP the default configurations of CoPP to ensure the system and network stability.

Default Queue Mapping Policy

By default, CoPP provides 8 CPU queues for data forwarding that would have a default scheduling weight. The system pre-defines 15 types of control plane protocols mapping from queue 8 to 22. The default queue mapping policy is as follows.

Table 1. Default Queue Mapping Policy

Protocols	CPU Queue	Default Scheduling Weight
BPDU	7	32
LACP	6	32
LLDP	5	32
ARP/NDP	4	32
MLAG/MLAG-MAC-SYNC	3	16
SSH/TELNET/SNMP	2	32
DHCP/DHCPv6/IGMP/PIM	1	16
Default*	0	16

Default*: The flow of traffic directed to switch CPU will be sent to CPU queue 0 when the traffic matches no firewall filter rule.

But for the packet with an Inet Precedence or DSCP value, it will not always be sent to CPU queue 0 when the traffic matches no firewall filter rule. When you configure the classifier to classify services on different inbound interfaces by using set class-of-service classifier trust-mode dscp and set class-of-service interface classifier commands. The packets will be sent to the CPU queue according to the Inet Precedence or DSCP value. Mappings from Inet Precedence/DSCP value to CPU Queue are shown in the following tables.

Table 2. Mapping from Inet Precedence value to CPU Queue

Inet-precedence	CPU Queue
0	0
1	1
2	2
3	3
4	4
5	5
6	6
7	7

Table 3. Mapping from DSCP value to CPU Queue

DSCP	CPU Queue
0,1,2,3,4,5,6,7	0
8,9,10,11,12,13,14,15	1
16,17,18,19,20,21,22,23	2
24,25,26,27,28,29,30,31	3
32,33,34,35,36,37,38,39	4
40,41,42,43,44,45,46,47	5
48,49,50,51,52,53,54,55	6
56,57,58,59,60,61,62,63	7

Default CLI Settings

PicOS will startup with the following CLI commands by default. Users can change the pre-defined CoPP policies but are NOT allowed to delete them.

NOTE: The values of min-bandwidth-pps and max-bandwidth-pps are different on different platforms.

# Default configurations of forwarding class for CoPP.

set class-of-service forwarding-class bpdu-class local-priority 7
set class-of-service forwarding-class lacp-class local-priority 6
set class-of-service forwarding-class lldp-class local-priority 5
set class-of-service forwarding-class arp-ndp-class local-priority 4
set class-of-service forwarding-class mlag-class local-priority 3
set class-of-service forwarding-class management-class local-priority 2
set class-of-service forwarding-class dhcp-igmp-pim-class local-priority 1
set class-of-service forwarding-class default-class local-priority 0

# Default configurations of schedulers for CoPP.

set class-of-service scheduler arp-ndp-scheduler mode WRR
set class-of-service scheduler arp-ndp-scheduler weight 32
set class-of-service scheduler arp-ndp-scheduler max-bandwidth-pps 500
set class-of-service scheduler arp-ndp-scheduler min-bandwidth-pps 100


set class-of-service scheduler management-scheduler mode WRR
set class-of-service scheduler management-scheduler weight 32
set class-of-service scheduler management-scheduler max-bandwidth-pps 500
set class-of-service scheduler management-scheduler min-bandwidth-pps 100

set class-of-service scheduler dhcp-igmp-pim-scheduler mode WRR
set class-of-service scheduler dhcp-igmp-pim-scheduler weight 16
set class-of-service scheduler dhcp-igmp-pim-scheduler max-bandwidth-pps 500
set class-of-service scheduler dhcp-igmp-pim-scheduler min-bandwidth-pps 0

set class-of-service scheduler mlag-scheduler mode WRR
set class-of-service scheduler mlag-scheduler weight 16
set class-of-service scheduler mlag-scheduler max-bandwidth-pps 500
set class-of-service scheduler mlag-scheduler min-bandwidth-pps 0

set class-of-service scheduler bpdu-scheduler mode WRR
set class-of-service scheduler bpdu-scheduler weight 32
set class-of-service scheduler bpdu-scheduler max-bandwidth-pps 500
set class-of-service scheduler bpdu-scheduler min-bandwidth-pps 100

set class-of-service scheduler lacp-scheduler mode WRR
set class-of-service scheduler lacp-scheduler weight 32
set class-of-service scheduler lacp-scheduler max-bandwidth-pps 500
set class-of-service scheduler lacp-scheduler min-bandwidth-pps 100

set class-of-service scheduler lldp-scheduler mode WRR
set class-of-service scheduler lldp-scheduler weight 32
set class-of-service scheduler lldp-scheduler max-bandwidth-pps 500
set class-of-service scheduler lldp-scheduler min-bandwidth-pps 100 

set class-of-service scheduler default-scheduler mode WRR
set class-of-service scheduler default-scheduler weight 16
set class-of-service scheduler default-scheduler max-bandwidth-pps 500
set class-of-service scheduler default-scheduler min-bandwidth-pps 0
  
set class-of-service scheduler-profile copp-profile forwarding-class bpdu-class scheduler bpdu-scheduler
set class-of-service scheduler-profile copp-profile forwarding-class lacp-class scheduler lacp-scheduler
set class-of-service scheduler-profile copp-profile forwarding-class lldp-class scheduler lldp-scheduler
set class-of-service scheduler-profile copp-profile forwarding-class dhcp-igmp-pim-class scheduler dhcp-igmp-pim-scheduler
set class-of-service scheduler-profile copp-profile forwarding-class mlag-class scheduler mlag-scheduler
set class-of-service scheduler-profile copp-profile forwarding-class management-class scheduler management-scheduler
set class-of-service scheduler-profile copp-profile forwarding-class arp-ndp-class scheduler arp-ndp-scheduler
set class-of-service scheduler-profile copp-profile forwarding-class default-class scheduler default-scheduler

# Apply schedulers of CoPP to inbound interface.

set class-of-service interface inbound-control-plane scheduler-profile copp-profile

# Default configurations of protocol sequences and forwarding class.

set firewall filter copp sequence 10 from protocol bpdu
set firewall filter copp sequence 10 then forwarding-class bpdu-class
set firewall filter copp sequence 20 from protocol lacp
set firewall filter copp sequence 20 then forwarding-class lacp-class
set firewall filter copp sequence 30 from protocol lldp
set firewall filter copp sequence 30 then forwarding-class lldp-class
set firewall filter copp sequence 40 from protocol arp
set firewall filter copp sequence 40 then forwarding-class arp-ndp-class
set firewall filter copp sequence 50 from protocol ndp
set firewall filter copp sequence 50 then forwarding-class arp-ndp-class
set firewall filter copp sequence 60 from protocol bfd
set firewall filter copp sequence 60 then forwarding-class default-class
set firewall filter copp sequence 70 from protocol mlag  
set firewall filter copp sequence 70 then forwarding-class mlag-class
set firewall filter copp sequence 80 from protocol mlag-mac-sync 
set firewall filter copp sequence 80 then forwarding-class mlag-class
set firewall filter copp sequence 90 from protocol bgp
set firewall filter copp sequence 90 then forwarding-class default-class
set firewall filter copp sequence 100 from protocol ospf
set firewall filter copp sequence 100 then forwarding-class default-class
set firewall filter copp sequence 110 from protocol rip
set firewall filter copp sequence 110 then forwarding-class default-class
set firewall filter copp sequence 120 from protocol dhcp
set firewall filter copp sequence 120 then forwarding-class dhcp-igmp-pim-class
set firewall filter copp sequence 130 from protocol vrrp
set firewall filter copp sequence 130 then forwarding-class default-class
set firewall filter copp sequence 140 from protocol igmp
set firewall filter copp sequence 140 then forwarding-class dhcp-igmp-pim-class
set firewall filter copp sequence 150 from protocol pim
set firewall filter copp sequence 150 then forwarding-class dhcp-igmp-pim-class
set firewall filter copp sequence 160 from protocol ssh
set firewall filter copp sequence 160 then forwarding-class management-class
set firewall filter copp sequence 170 from protocol telnet
set firewall filter copp sequence 170 then forwarding-class management-class
set firewall filter copp sequence 180 from protocol snmp
set firewall filter copp sequence 180 then forwarding-class management-class

#Apply firewall filter of CoPP to inbound interface.

set firewall filter copp input interface inbound-control-plane

Show Default Settings of CoPP

You can use run show copp bandwidth, run show class-of-service interface inbound-control-plane and run show filter copp commands to view the default settings. (Besides default settings, the commands will also show the COPP configurations made by the user.)

admin@PICOS# run show copp bandwidth
Forwarding Class           Min-Bandwidth Max-Bandwidth Weight Local-Priority Schedule-Mode
default-class              0             500           16     0              WRR
dhcp-igmp-pim-class        0             500           16     1              WRR
management-class           100           500           12     2              WRR
mlag-class                 0             500           16     3              WRR
arp-ndp-class              100           500           32     4              WRR
lldp-class                 100           500           32     5              WRR
lacp-class                 100           500           32     6              WRR
bpdu-class                 100           500           32     7              WRR

admin@PICOS# run show filter copp
Filter: copp
    Description:
    Sequence: 10
        Description:
        match counter:  36415 packets
        match-condition:
            protocol:                 bpdu
        action: forward
        forwarding_class: bpdu-class
    Sequence: 20
        Description:
        match counter:  0 packets
        match-condition:
            protocol:                 lacp
        action: forward
        forwarding_class: lacp-class
    Sequence: 30
        Description:
        match counter:  0 packets
        match-condition:
            protocol:                 lldp
        action: forward
        forwarding_class: lldp-class
    Sequence: 40
        Description:
        match counter:  0 packets
        match-condition:
            protocol:                 arp
        action: forward
        forwarding_class: arp-ndp-class
    Sequence: 50
        Description:
        match counter:  0 packets
        match-condition:
            protocol:                 ndp
        action: forward
        forwarding_class: arp-ndp-class
    Sequence: 60
        Description:
        match counter:  0 packets
        match-condition:
            protocol:                 bfd
        action: forward
        forwarding_class: default-class
    Sequence: 70
        Description:
        match counter:  0 packets
        match-condition:
            protocol:                 mlag
        action: forward
        forwarding_class: mlag-class
    Sequence: 80
        Description:
        match counter:  0 packets
        match-condition:
            protocol:                 mlag-mac-sync
        action: forward
        forwarding_class: mlag-class
    Sequence: 90
        Description:
        match counter:  0 packets
        match-condition:
            protocol:                 bgp
        action: forward
        forwarding_class: default-class
    Sequence: 100
        Description:
        match counter:  0 packets
        match-condition:
            protocol:                 ospf
        action: forward
        forwarding_class: default-class
    Sequence: 110
        Description:
        match counter:  0 packets
        match-condition:
            protocol:                 rip
        action: forward
        forwarding_class: default-class
    Sequence: 120
        Description:
        match counter:  0 packets
        match-condition:
            protocol:                 dhcp
        action: forward
        forwarding_class: dhcp-igmp-pim-class
    Sequence: 130
        Description:
        match counter:  0 packets
        match-condition:
            protocol:                 vrrp
        action: forward
        forwarding_class: default-class
    Sequence: 140
        Description:
        match counter:  0 packets
        match-condition:
            protocol:                 igmp
        action: forward
        forwarding_class: dhcp-igmp-pim-class
    Sequence: 150
        Description:
        match counter:  0 packets
        match-condition:
            protocol:                 pim
        action: forward
        forwarding_class: dhcp-igmp-pim-class
    Sequence: 160
        Description:
        match counter:  0 packets
        match-condition:
            protocol:                 ssh
        action: forward
        forwarding_class: management-class
    Sequence: 170
        Description:
        match counter:  0 packets
        match-condition:
            protocol:                 snmp
        action: forward
        forwarding_class: management-class
    Sequence: 180
        Description:
        match counter:  0 packets
        match-condition:
            protocol:                 ntp
        action: forward
        forwarding_class: management-class
    Sequence: 190
        Description:
        match counter:  0 packets
        match-condition:
            protocol:                 tacacs
        action: forward
        forwarding_class: management-class
    Sequence: 200
        Description:
        match counter:  0 packets
        match-condition:
            protocol:                 radius
        action: forward
        forwarding_class: management-class
    Sequence: 210
        Description:
        match counter:  0 packets
        match-condition:
            protocol:                 mvrp
        action: forward
        forwarding_class: bpdu-class
    Sequence: 220
        Description:
        match counter:  0 packets
        match-condition:
            protocol:                 erps
        action: forward
        forwarding_class: bpdu-class
    Sequence: 230
        Description:
        match counter:  0 packets
        match-condition:
            protocol:                 ripng
        action: forward
        forwarding_class: default-class
    Sequence: 240
        Description:
        match counter:  0 packets
        match-condition:
            protocol:                 loopback-detection
        action: forward
        forwarding_class: management-class
    Sequence: 260
        Description:
        match counter:  0 packets
        match-condition:
            protocol:                 isis
        action: forward
        forwarding_class: default-class
    Sequence: 270
        Description:
        match counter:  0 packets
        match-condition:
            protocol:                 dhcp6
        action: forward
        forwarding_class: dhcp-igmp-pim-class
    Input interface: inbound-control-plane

admin@PICOS# run show class-of-service interface inbound-control-plane
Interface : inbound-control-plane
Scheduler-profile : copp-profile
Forwarding-class     Local-priority   Scheduler               Min-Bandwidth   Max-Bandwidth   Weight   Schedule-Mode
------------------   --------------   ---------------------   -------------   -------------   ------   -------------
default-class        0                default-scheduler       0               500             16       WRR
dhcp-igmp-pim-class  1                dhcp-igmp-pim-scheduler 0               500             16       WRR
management-class     2                management-scheduler    100             500             12       WRR
mlag-class           3                mlag-scheduler          0               500             16       WRR
arp-ndp-class        4                arp-ndp-scheduler       100             500             32       WRR
lldp-class           5                lldp-scheduler          100             500             32       WRR
lacp-class           6                lacp-scheduler          100             500             32       WRR
bpdu-class           7                bpdu-scheduler          100             500             32       WRR