CloudLabBox
Try the free demo

CCNP Service Provider lab 7 of 23

Control-plane protection: LPTS, MPP and CoPP

See how IOS XR's LPTS decides what reaches the route processor, limit management to the NOC with MPP, then build Control Plane Policing on IOS XE and compare the two approaches.

Run this lab

It needs Lite: its 4 nodes are set to 4 vCPU and 7,680 MB in total. That fits the free demo too.

In your workspace: Shared, then CCNP Service Provider guided labs, then 07 - Control-plane protection - LPTS MPP and CoPP

Try it free for 30 minutesRun it on Lite from £3 a day

The free demo needs no card and no email. Every lab plan includes every guided lab.

Level
Advanced
Time
About 60 minutes
Nodes need
4 vCPU, 7,680 MB
Smallest plan
Lite

The scenario

A provider's routers sit on the Internet, so anybody can send packets to them. A router's route processor is small compared with its line cards, and a flood of packets aimed at the router itself can starve its routing protocols. Fellgate's security team wants to know how the two families of router handle this.

R1 runs IOS XR. It has a NOC LAN and a Guest LAN, and only the NOC should be able to manage it. PE runs IOS XE and has no control-plane protection at all yet.

DeviceInterfaceAddressConnects to
NOCeth010.10.1.2/30R1 Gi0/0/0/0
GUESTeth010.10.2.2/30R1 Gi0/0/0/1
R1Loopback010.255.0.1/32
R1Gi0/0/0/010.10.1.1/30NOC eth0
R1Gi0/0/0/110.10.2.1/30GUEST eth0
R1Gi0/0/0/210.0.12.1/30PE Gi1
PELoopback010.255.0.2/32
PEGi110.0.12.2/30R1 Gi0/0/0/2

What you’ll practise

  • Read LPTS bindings and Pre-IFIB entries
  • See LPTS change when a service starts
  • Restrict management with Management Plane Protection
  • Build and verify CoPP on IOS XE
  • Compare LPTS with CoPP

The tasks

  1. What the router is listening for
  2. Open a service and see LPTS change
  3. Limit management to the NOC with MPP
  4. CoPP on IOS XE
  5. Compare the two

The Lab Tasks pane has the scenario, these tasks, the checks to run, hints and the full solution.

Topology and devices

The network as it opens in EVE-NG, drawn from the lab’s own canvas, and the image each node runs.

Topology of Control-plane protection - LPTS MPP and CoPP4 nodes, 3 links. Every link is listed as text below the diagram.NOCGUESTR1PEGi0/0/0/2Gi1eth0Gi0/0/0/0eth0Gi0/0/0/1
4 nodes, with the interface names each link uses. On a narrow screen, scroll the diagram sideways.
Every link, as text
  • NOC eth0 to R1 Gi0/0/0/0
  • GUEST eth0 to R1 Gi0/0/0/1
  • R1 Gi0/0/0/2 to PE Gi1
Nodes in Control-plane protection: LPTS, MPP and CoPP, with the image each runs and the vCPU and RAM it’s set to
NodeDeviceImage in Add NodeSet to
NOCAlpine Linuxclbalpinebase-alpine-base-3-20-31 vCPU, 512 MB
GUESTAlpine Linuxclbalpinebase-alpine-base-3-20-31 vCPU, 512 MB
R1Cisco IOS XRvxrv-k9-demo-6.3.11 vCPU, 2,560 MB
PECisco CSR 1000vcsr1000vng-universalk9.17.03.08a-serial1 vCPU, 4,096 MB

How to open this lab

  1. Sign in to your workspace at lab.cloudlabbox.com.

  2. In File Manager, open Shared, then the folder CCNP Service Provider guided labs.

  3. Open 07 - Control-plane protection - LPTS MPP and CoPP and start its nodes, then open Lab Tasks for the scenario and the steps.

The lab is read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change it, rebuild it in your own folder.

More CCNP Service Provider labs

All CCNP Service Provider labs

Related labs in other courses

CloudLabBox is independent of Cisco. The lab follows exam topics and isn’t vendor training material; vendor names identify the exams and the images in the workspace.