Configuring Control Plane Policing
Control Plane Policing (CoPP) allows a policy map to be applied to the control plane. The policy map is applied to all traffic entering the switch from a non-management port in order to prevent DoS attacks from impacting performance.
This section contains payload examples and CLIs to demonstrate how to use the NX-API REST API to configure COPP on Cisco Nexus 3000 and 9000 Series switches and to show how the REST APIs correspond to the CLI commands. For more information about ARP, see the Cisco Nexus 9000 Series NX-OS Security Configuration Guide.
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-installation-and-configuration-guides-list.html/
Creating a Class Map
This example creates a class-map and a 'match-any' class.
Note: The property information for this example was added in Release 9.3(3).
Verifying a DME Configuration
The following table contains the distinguished name (DN) for each managed object (MO) in the DME payload. Issue a GET request using the DN to verify the configuration was posted or to get information about the configured properties of a particular object.
MO | DN |
coppEntity |
sys/copp |
coppClass |
sys/copp/classp-{cName} |
coppClass Properties
The following table contains information about the coppClass properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
cName | string:Basic
| Class-map name | A sequence of characters |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
Related Documentation
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
Configuring a Class Map
This example configures the class map.
CLI Commands
The CLI commands and options listed below are the equivalent to the payload example displayed in the pane on the right.
match protocol arp
match exception mtu-failure
match exception ip option
match exception ipv6 icmp unreachable
match exception multicast rpf-failure
Note: The property information for this example was added in Release 9.3(3).
Verifying a DME Configuration
The following table contains the distinguished name (DN) for each managed object (MO) in the DME payload. Issue a GET request using the DN to verify the configuration was posted or to get information about the configured properties of a particular object.
MO | DN |
coppClass |
sys/copp/classp-{cName} |
coppMulticast |
sys/copp/classp-{cName}/mcast-{mcastOption} |
coppExeOptions |
sys/copp/classp-{cName}/excep-{option} |
coppIp |
sys/copp/classp-{cName}/ip |
coppIpv6Icmp |
sys/copp/classp-{cName}/icmpv6-{option} |
coppProtocol |
sys/copp/classp-{cName}/prot-{type} |
coppClass Properties
The following table contains information about the coppClass properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
cName | string:Basic
| Class-map name | A sequence of characters |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
coppMulticast Properties
The following table contains information about the coppMulticast properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
mcastOption | copp:Mcast (scalar:Enum8) | Multicast options | SELECTION: 0 - Undefined 1 - dest-miss 2 - rpf-failure 3 - sg-rpf-failure 4 - ipv6-dest-miss 5 - ipv6-rpf-failure 6 - ipv6-sg-rpf-failure DEFAULT: Undefined |
coppExeOptions Properties
The following table contains information about the coppExeOptions properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
option | copp:Excep (scalar:Enum16) | Match options | SELECTION: 0 - Undefined 1 - glean 2 - mtu-failure 3 - ttl-failure 4 - nat-flow 5 - sflow 6 - mvpn DEFAULT: Undefined |
coppIp Properties
The following table contains information about the coppIp properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
options | scalar:Bool
| Ip Option | SELECTION: true or false |
coppIpv6Icmp Properties
The following table contains information about the coppIpv6Icmp properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
option | copp:Icmp (scalar:Enum8) | icmp options | SELECTION: 0 - Undefined 1 - redirect 2 - unreachable DEFAULT: Undefined |
coppProtocol Properties
The following table contains information about the coppProtocol properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
type | copp:Proto (scalar:Bitmask64) | Protocol List | SELECTION: 1 - bgp 2 - ospf 4 - cdp 8 - traceroute 16 - lldp 32 - lacp 64 - isis 128 - arp 256 - dhcp 512 - igmp 1024 - icmp 2048 - zmq 4096 - mgmt 8192 - snmp 16384 - stp 32768 - bfd 65536 - pim 131072 - static 262144 - ifc 524288 - mpls 1048576 - mplsexp6 2097152 - mplsralert |
Related Documentation
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
Configuring a Match for IPv4 Option Exception Packets
CLI Commands
The CLI commands are equivalent to the payload examples displayed in the pane on the right. Click the DME tab in the top-left corner of the right pane to view the JSON payload. Click the YANG tab to view the XML payload.
class-map type control-plane CMAP
match exception ip option
Note: The property information for this example was added in Release 9.3(3).
Verifying a DME Configuration
The following table contains the distinguished name (DN) for each managed object (MO) in the DME payload. Issue a GET request using the DN to verify the configuration was posted or to get information about the configured properties of a particular object.
MO | DN |
coppEntity |
sys/copp |
coppClass |
sys/copp/classp-{cName} |
coppIp |
sys/copp/classp-{cName}/ip |
coppClass Properties
The following table contains information about the coppClass properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
cName | string:Basic
| Class-map name | A sequence of characters |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
coppIp Properties
The following table contains information about the coppIp properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
options | scalar:Bool
| Ip Option | SELECTION: true or false |
Related Documentation
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
Deleting a Match for IPv4 Option Exception Packets
CLI Commands
The CLI commands are equivalent to the payload examples displayed in the pane on the right. Click the DME tab in the top-left corner of the right pane to view the JSON payload. Click the YANG tab to view the XML payload.
class-map type control-plane CMAP
no match exception ip option
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/media/dme/index.html
Configuring a Match for Redirected IPv4 ICMP Redirect Packets
CLI Commands
The CLI commands are equivalent to the payload examples displayed in the pane on the right. Click the DME tab in the top-left corner of the right pane to view the JSON payload. Click the YANG tab to view the XML payload.
class-map type control-plane CMAP
match exception ip icmp redirect
Note: The property information for this example was added in Release 9.3(3).
Verifying a DME Configuration
The following table contains the distinguished name (DN) for each managed object (MO) in the DME payload. Issue a GET request using the DN to verify the configuration was posted or to get information about the configured properties of a particular object.
MO | DN |
coppEntity |
sys/copp |
coppClass |
sys/copp/classp-{cName} |
coppIpIcmp |
sys/copp/classp-{cName}/icmp-{option} |
coppClass Properties
The following table contains information about the coppClass properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
cName | string:Basic
| Class-map name | A sequence of characters |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
coppIpIcmp Properties
The following table contains information about the coppIpIcmp properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
option | copp:Icmp (scalar:Enum8) | icmp options | SELECTION: 0 - Undefined 1 - redirect 2 - unreachable DEFAULT: Undefined |
Related Documentation
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
Deleting a Match for Redirected IPv4 ICMP Redirect Packets
CLI Commands
The CLI commands are equivalent to the payload examples displayed in the pane on the right. Click the DME tab in the top-left corner of the right pane to view the JSON payload. Click the YANG tab to view the XML payload.
class-map type control-plane CMAP
no match exception ip icmp redirect
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/media/dme/index.html
Configuring a Match for Unreachable IPv4 ICMP Redirect Packets
CLI Commands
The CLI commands are equivalent to the payload examples displayed in the pane on the right. Click the DME tab in the top-left corner of the right pane to view the JSON payload. Click the YANG tab to view the XML payload.
class-map type control-plane CMAP
match exception ip icmp unreachable
Note: The property information for this example was added in Release 9.3(3).
Verifying a DME Configuration
The following table contains the distinguished name (DN) for each managed object (MO) in the DME payload. Issue a GET request using the DN to verify the configuration was posted or to get information about the configured properties of a particular object.
MO | DN |
coppEntity |
sys/copp |
coppClass |
sys/copp/classp-{cName} |
coppIpIcmp |
sys/copp/classp-{cName}/icmp-{option} |
coppClass Properties
The following table contains information about the coppClass properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
cName | string:Basic
| Class-map name | A sequence of characters |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
coppIpIcmp Properties
The following table contains information about the coppIpIcmp properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
option | copp:Icmp (scalar:Enum8) | icmp options | SELECTION: 0 - Undefined 1 - redirect 2 - unreachable DEFAULT: Undefined |
Related Documentation
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
Deleting a Match for Unreachable IPv4 ICMP Redirect Packets
CLI Commands
The CLI commands are equivalent to the payload examples displayed in the pane on the right. Click the DME tab in the top-left corner of the right pane to view the JSON payload. Click the YANG tab to view the XML payload.
class-map type control-plane CMAP
no match exception ip icmp unreachable
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/media/dme/index.html
Configuring a Match for IPv6 Option Exception Packets
CLI Commands
The CLI commands are equivalent to the payload examples displayed in the pane on the right. Click the DME tab in the top-left corner of the right pane to view the JSON payload. Click the YANG tab to view the XML payload.
class-map type control-plane CMAP
match exception ipv6 option
Note: The property information for this example was added in Release 9.3(3).
Verifying a DME Configuration
The following table contains the distinguished name (DN) for each managed object (MO) in the DME payload. Issue a GET request using the DN to verify the configuration was posted or to get information about the configured properties of a particular object.
MO | DN |
coppEntity |
sys/copp |
coppClass |
sys/copp/classp-{cName} |
coppIpv6 |
sys/copp/classp-{cName}/ipv6 |
coppClass Properties
The following table contains information about the coppClass properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
cName | string:Basic
| Class-map name | A sequence of characters |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
coppIpv6 Properties
The following table contains information about the coppIpv6 properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
options | scalar:Bool
| Ip Option | SELECTION: true or false |
Related Documentation
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
Deleting a Match for IPv6 Option Exception Packets
CLI Commands
The CLI commands are equivalent to the payload examples displayed in the pane on the right. Click the DME tab in the top-left corner of the right pane to view the JSON payload. Click the YANG tab to view the XML payload.
class-map type control-plane CMAP
no match exception ipv6 option
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/media/dme/index.html
Configuring a Match for IPv6 ICMP Redirect Packets
CLI Commands
The CLI commands are equivalent to the payload examples displayed in the pane on the right. Click the DME tab in the top-left corner of the right pane to view the JSON payload. Click the YANG tab to view the XML payload.
class-map type control-plane CMAP
match exception ipv6 icmp redirect
Note: The property information for this example was added in Release 9.3(3).
Verifying a DME Configuration
The following table contains the distinguished name (DN) for each managed object (MO) in the DME payload. Issue a GET request using the DN to verify the configuration was posted or to get information about the configured properties of a particular object.
MO | DN |
coppEntity |
sys/copp |
coppClass |
sys/copp/classp-{cName} |
coppIpv6Icmp |
sys/copp/classp-{cName}/icmpv6-{option} |
coppClass Properties
The following table contains information about the coppClass properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
cName | string:Basic
| Class-map name | A sequence of characters |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
coppIpv6Icmp Properties
The following table contains information about the coppIpv6Icmp properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
option | copp:Icmp (scalar:Enum8) | icmp options | SELECTION: 0 - Undefined 1 - redirect 2 - unreachable DEFAULT: Undefined |
Related Documentation
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
Deleting a Match for IPv6 ICMP Redirect Packets
CLI Commands
The CLI commands are equivalent to the payload examples displayed in the pane on the right. Click the DME tab in the top-left corner of the right pane to view the JSON payload. Click the YANG tab to view the XML payload.
class-map type control-plane CMAP
no match exception ipv6 icmp redirect
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/media/dme/index.html
Configuring a Match for Unreachable IPv6 ICMP Redirect Packets
CLI Commands
The CLI commands are equivalent to the payload examples displayed in the pane on the right. Click the DME tab in the top-left corner of the right pane to view the JSON payload. Click the YANG tab to view the XML payload.
class-map type control-plane CMAP
match exception ipv6 icmp unreachable
Note: The property information for this example was added in Release 9.3(3).
Verifying a DME Configuration
The following table contains the distinguished name (DN) for each managed object (MO) in the DME payload. Issue a GET request using the DN to verify the configuration was posted or to get information about the configured properties of a particular object.
MO | DN |
coppEntity |
sys/copp |
coppClass |
sys/copp/classp-{cName} |
coppIpv6Icmp |
sys/copp/classp-{cName}/icmpv6-{option} |
coppClass Properties
The following table contains information about the coppClass properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
cName | string:Basic
| Class-map name | A sequence of characters |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
coppIpv6Icmp Properties
The following table contains information about the coppIpv6Icmp properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
option | copp:Icmp (scalar:Enum8) | icmp options | SELECTION: 0 - Undefined 1 - redirect 2 - unreachable DEFAULT: Undefined |
Related Documentation
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
Deleting a Match for Unreachable IPv6 ICMP Redirect Packets
CLI Commands
The CLI commands are equivalent to the payload examples displayed in the pane on the right. Click the DME tab in the top-left corner of the right pane to view the JSON payload. Click the YANG tab to view the XML payload.
class-map type control-plane CMAP
no match exception ipv6 icmp unreachable
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/media/dme/index.html
Configuring a Match for Exception Packets Failed in TTL
CLI Commands
The CLI commands are equivalent to the payload examples displayed in the pane on the right. Click the DME tab in the top-left corner of the right pane to view the JSON payload. Click the YANG tab to view the XML payload.
class-map type control-plane CMAP
match exception ttl-failure
Note: The property information for this example was added in Release 9.3(3).
Verifying a DME Configuration
The following table contains the distinguished name (DN) for each managed object (MO) in the DME payload. Issue a GET request using the DN to verify the configuration was posted or to get information about the configured properties of a particular object.
MO | DN |
coppEntity |
sys/copp |
coppClass |
sys/copp/classp-{cName} |
coppExeOptions |
sys/copp/classp-{cName}/excep-{option} |
coppClass Properties
The following table contains information about the coppClass properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
cName | string:Basic
| Class-map name | A sequence of characters |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
coppExeOptions Properties
The following table contains information about the coppExeOptions properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
option | copp:Excep (scalar:Enum16) | Match options | SELECTION: 0 - Undefined 1 - glean 2 - mtu-failure 3 - ttl-failure 4 - nat-flow 5 - sflow 6 - mvpn DEFAULT: Undefined |
Related Documentation
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
Deleting a Match for Exception Packets Failed in TTL
CLI Commands
The CLI commands are equivalent to the payload examples displayed in the pane on the right. Click the DME tab in the top-left corner of the right pane to view the JSON payload. Click the YANG tab to view the XML payload.
class-map type control-plane CMAP
no match exception ttl-failure
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/media/dme/index.html
Configuring a Match for Glean Exception Packets
CLI Commands
The CLI commands are equivalent to the payload examples displayed in the pane on the right. Click the DME tab in the top-left corner of the right pane to view the JSON payload. Click the YANG tab to view the XML payload.
class-map type control-plane CMAP
match exception glean
Note: The property information for this example was added in Release 9.3(3).
Verifying a DME Configuration
The following table contains the distinguished name (DN) for each managed object (MO) in the DME payload. Issue a GET request using the DN to verify the configuration was posted or to get information about the configured properties of a particular object.
MO | DN |
coppEntity |
sys/copp |
coppClass |
sys/copp/classp-{cName} |
coppExeOptions |
sys/copp/classp-{cName}/excep-{option} |
coppClass Properties
The following table contains information about the coppClass properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
cName | string:Basic
| Class-map name | A sequence of characters |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
coppExeOptions Properties
The following table contains information about the coppExeOptions properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
option | copp:Excep (scalar:Enum16) | Match options | SELECTION: 0 - Undefined 1 - glean 2 - mtu-failure 3 - ttl-failure 4 - nat-flow 5 - sflow 6 - mvpn DEFAULT: Undefined |
Related Documentation
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
Deleting a Match for Glean Exception Packets
CLI Commands
The CLI commands are equivalent to the payload examples displayed in the pane on the right. Click the DME tab in the top-left corner of the right pane to view the JSON payload. Click the YANG tab to view the XML payload.
class-map type control-plane CMAP
no match exception glean
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/media/dme/index.html
Configuring a Match for MTU-Failed Exception Packets
CLI Commands
The CLI commands are equivalent to the payload examples displayed in the pane on the right. Click the DME tab in the top-left corner of the right pane to view the JSON payload. Click the YANG tab to view the XML payload.
class-map type control-plane CMAP
match exception mtu-failure
Note: The property information for this example was added in Release 9.3(3).
Verifying a DME Configuration
The following table contains the distinguished name (DN) for each managed object (MO) in the DME payload. Issue a GET request using the DN to verify the configuration was posted or to get information about the configured properties of a particular object.
MO | DN |
coppEntity |
sys/copp |
coppClass |
sys/copp/classp-{cName} |
coppExeOptions |
sys/copp/classp-{cName}/excep-{option} |
coppClass Properties
The following table contains information about the coppClass properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
cName | string:Basic
| Class-map name | A sequence of characters |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
coppExeOptions Properties
The following table contains information about the coppExeOptions properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
option | copp:Excep (scalar:Enum16) | Match options | SELECTION: 0 - Undefined 1 - glean 2 - mtu-failure 3 - ttl-failure 4 - nat-flow 5 - sflow 6 - mvpn DEFAULT: Undefined |
Related Documentation
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
Deleting a Match for MTU-Failed Exception Packets
CLI Commands
The CLI commands are equivalent to the payload examples displayed in the pane on the right. Click the DME tab in the top-left corner of the right pane to view the JSON payload. Click the YANG tab to view the XML payload.
class-map type control-plane CMAP
no match exception mtu-failure
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/media/dme/index.html
Configuring a Match for IPv4 Software NAT Flow Packets
CLI Commands
The CLI commands are equivalent to the payload examples displayed in the pane on the right. Click the DME tab in the top-left corner of the right pane to view the JSON payload. Click the YANG tab to view the XML payload.
class-map type control-plane CMAP
match exception nat-flow
Note: The property information for this example was added in Release 9.3(3).
Verifying a DME Configuration
The following table contains the distinguished name (DN) for each managed object (MO) in the DME payload. Issue a GET request using the DN to verify the configuration was posted or to get information about the configured properties of a particular object.
MO | DN |
coppEntity |
sys/copp |
coppClass |
sys/copp/classp-{cName} |
coppExeOptions |
sys/copp/classp-{cName}/excep-{option} |
coppClass Properties
The following table contains information about the coppClass properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
cName | string:Basic
| Class-map name | A sequence of characters |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
coppExeOptions Properties
The following table contains information about the coppExeOptions properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
option | copp:Excep (scalar:Enum16) | Match options | SELECTION: 0 - Undefined 1 - glean 2 - mtu-failure 3 - ttl-failure 4 - nat-flow 5 - sflow 6 - mvpn DEFAULT: Undefined |
Related Documentation
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
Deleting a Match for IPv4 Software NAT Flow Packets
CLI Commands
The CLI commands are equivalent to the payload examples displayed in the pane on the right. Click the DME tab in the top-left corner of the right pane to view the JSON payload. Click the YANG tab to view the XML payload.
class-map type control-plane CMAP
no match exception nat-flow
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/media/dme/index.html
Configuring a Match for Multicast RPF Check Failure Packets
CLI Commands
The CLI commands are equivalent to the payload examples displayed in the pane on the right. Click the DME tab in the top-left corner of the right pane to view the JSON payload. Click the YANG tab to view the XML payload.
class-map type control-plane CMAP
match exception multicast rpf-failure
Note: The property information for this example was added in Release 9.3(3).
Verifying a DME Configuration
The following table contains the distinguished name (DN) for each managed object (MO) in the DME payload. Issue a GET request using the DN to verify the configuration was posted or to get information about the configured properties of a particular object.
MO | DN |
coppEntity |
sys/copp |
coppClass |
sys/copp/classp-{cName} |
coppMulticast |
sys/copp/classp-{cName}/mcast-{mcastOption} |
coppClass Properties
The following table contains information about the coppClass properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
cName | string:Basic
| Class-map name | A sequence of characters |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
coppMulticast Properties
The following table contains information about the coppMulticast properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
mcastOption | copp:Mcast (scalar:Enum8) | Multicast options | SELECTION: 0 - Undefined 1 - dest-miss 2 - rpf-failure 3 - sg-rpf-failure 4 - ipv6-dest-miss 5 - ipv6-rpf-failure 6 - ipv6-sg-rpf-failure DEFAULT: Undefined |
Related Documentation
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
Deleting a Match for Multicast RPF Check Failure Packets
CLI Commands
The CLI commands are equivalent to the payload examples displayed in the pane on the right. Click the DME tab in the top-left corner of the right pane to view the JSON payload. Click the YANG tab to view the XML payload.
class-map type control-plane CMAP
no match exception multicast rpf-failure
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/media/dme/index.html
Configuring a Match for Multicast SG RPF Check Failure Packets
CLI Commands
The CLI commands are equivalent to the payload examples displayed in the pane on the right. Click the DME tab in the top-left corner of the right pane to view the JSON payload. Click the YANG tab to view the XML payload.
class-map type control-plane CMAP
match exception multicast sg-rpf-failure
Note: The property information for this example was added in Release 9.3(3).
Verifying a DME Configuration
The following table contains the distinguished name (DN) for each managed object (MO) in the DME payload. Issue a GET request using the DN to verify the configuration was posted or to get information about the configured properties of a particular object.
MO | DN |
coppEntity |
sys/copp |
coppClass |
sys/copp/classp-{cName} |
coppMulticast |
sys/copp/classp-{cName}/mcast-{mcastOption} |
coppClass Properties
The following table contains information about the coppClass properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
cName | string:Basic
| Class-map name | A sequence of characters |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
coppMulticast Properties
The following table contains information about the coppMulticast properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
mcastOption | copp:Mcast (scalar:Enum8) | Multicast options | SELECTION: 0 - Undefined 1 - dest-miss 2 - rpf-failure 3 - sg-rpf-failure 4 - ipv6-dest-miss 5 - ipv6-rpf-failure 6 - ipv6-sg-rpf-failure DEFAULT: Undefined |
Related Documentation
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
Deleting a Match for Multicast SG RPF Check Failure Packets
CLI Commands
The CLI commands are equivalent to the payload examples displayed in the pane on the right. Click the DME tab in the top-left corner of the right pane to view the JSON payload. Click the YANG tab to view the XML payload.
class-map type control-plane CMAP
no match exception multicast sg-rpf-failure
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/media/dme/index.html
Configuring a Match for Layer 3 Multicast Destination Lookup Failures
CLI Commands
The CLI commands are equivalent to the payload examples displayed in the pane on the right. Click the DME tab in the top-left corner of the right pane to view the JSON payload. Click the YANG tab to view the XML payload.
class-map type control-plane CMAP
match exception multicast dest-miss
Note: The property information for this example was added in Release 9.3(3).
Verifying a DME Configuration
The following table contains the distinguished name (DN) for each managed object (MO) in the DME payload. Issue a GET request using the DN to verify the configuration was posted or to get information about the configured properties of a particular object.
MO | DN |
coppEntity |
sys/copp |
coppClass |
sys/copp/classp-{cName} |
coppMulticast |
sys/copp/classp-{cName}/mcast-{mcastOption} |
coppClass Properties
The following table contains information about the coppClass properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
cName | string:Basic
| Class-map name | A sequence of characters |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
coppMulticast Properties
The following table contains information about the coppMulticast properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
mcastOption | copp:Mcast (scalar:Enum8) | Multicast options | SELECTION: 0 - Undefined 1 - dest-miss 2 - rpf-failure 3 - sg-rpf-failure 4 - ipv6-dest-miss 5 - ipv6-rpf-failure 6 - ipv6-sg-rpf-failure DEFAULT: Undefined |
Related Documentation
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
Deleting a Match for Layer 3 Multicast Destination Lookup Failures
CLI Commands
The CLI commands are equivalent to the payload examples displayed in the pane on the right. Click the DME tab in the top-left corner of the right pane to view the JSON payload. Click the YANG tab to view the XML payload.
class-map type control-plane CMAP
no match exception multicast dest-miss
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
Configuring a Match for IPv6 Multicast RPF Check Failures
CLI Commands
The CLI commands are equivalent to the payload examples displayed in the pane on the right. Click the DME tab in the top-left corner of the right pane to view the JSON payload. Click the YANG tab to view the XML payload.
class-map type control-plane CMAP
match exception multicast ipv6-rpf-failure
Note: The property information for this example was added in Release 9.3(3).
Verifying a DME Configuration
The following table contains the distinguished name (DN) for each managed object (MO) in the DME payload. Issue a GET request using the DN to verify the configuration was posted or to get information about the configured properties of a particular object.
MO | DN |
coppEntity |
sys/copp |
coppClass |
sys/copp/classp-{cName} |
coppMulticast |
sys/copp/classp-{cName}/mcast-{mcastOption} |
coppClass Properties
The following table contains information about the coppClass properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
cName | string:Basic
| Class-map name | A sequence of characters |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
coppMulticast Properties
The following table contains information about the coppMulticast properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
mcastOption | copp:Mcast (scalar:Enum8) | Multicast options | SELECTION: 0 - Undefined 1 - dest-miss 2 - rpf-failure 3 - sg-rpf-failure 4 - ipv6-dest-miss 5 - ipv6-rpf-failure 6 - ipv6-sg-rpf-failure DEFAULT: Undefined |
Related Documentation
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
Deleting a Match for IPv6 Multicast RPF Check Failures
CLI Commands
The CLI commands are equivalent to the payload examples displayed in the pane on the right. Click the DME tab in the top-left corner of the right pane to view the JSON payload. Click the YANG tab to view the XML payload.
class-map type control-plane CMAP
no match exception multicast ipv6-rpf-failure
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
Configuring a Match for IPv6 Multicast SG RPF Check Failures
CLI Commands
The CLI commands are equivalent to the payload examples displayed in the pane on the right. Click the DME tab in the top-left corner of the right pane to view the JSON payload. Click the YANG tab to view the XML payload.
class-map type control-plane CMAP
match exception multicast ipv6-sg-rpf-failure
Note: The property information for this example was added in Release 9.3(3).
Verifying a DME Configuration
The following table contains the distinguished name (DN) for each managed object (MO) in the DME payload. Issue a GET request using the DN to verify the configuration was posted or to get information about the configured properties of a particular object.
MO | DN |
coppEntity |
sys/copp |
coppClass |
sys/copp/classp-{cName} |
coppMulticast |
sys/copp/classp-{cName}/mcast-{mcastOption} |
coppClass Properties
The following table contains information about the coppClass properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
cName | string:Basic
| Class-map name | A sequence of characters |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
coppMulticast Properties
The following table contains information about the coppMulticast properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
mcastOption | copp:Mcast (scalar:Enum8) | Multicast options | SELECTION: 0 - Undefined 1 - dest-miss 2 - rpf-failure 3 - sg-rpf-failure 4 - ipv6-dest-miss 5 - ipv6-rpf-failure 6 - ipv6-sg-rpf-failure DEFAULT: Undefined |
Related Documentation
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
Deleting a Match for IPv6 Multicast SG RPF Check Failures
CLI Commands
The CLI commands are equivalent to the payload examples displayed in the pane on the right. Click the DME tab in the top-left corner of the right pane to view the JSON payload. Click the YANG tab to view the XML payload.
class-map type control-plane CMAP
no match exception multicast ipv6-sg-rpf-failure
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
Configuring a Match for IPv6 L3 Multicast Destination Lookup Failures
CLI Commands
The CLI commands are equivalent to the payload examples displayed in the pane on the right. Click the DME tab in the top-left corner of the right pane to view the JSON payload. Click the YANG tab to view the XML payload.
class-map type control-plane CMAP
match exception multicast ipv6-dest-miss
Note: The property information for this example was added in Release 9.3(3).
Verifying a DME Configuration
The following table contains the distinguished name (DN) for each managed object (MO) in the DME payload. Issue a GET request using the DN to verify the configuration was posted or to get information about the configured properties of a particular object.
MO | DN |
coppEntity |
sys/copp |
coppClass |
sys/copp/classp-{cName} |
coppMulticast |
sys/copp/classp-{cName}/mcast-{mcastOption} |
coppClass Properties
The following table contains information about the coppClass properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
cName | string:Basic
| Class-map name | A sequence of characters |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
coppMulticast Properties
The following table contains information about the coppMulticast properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
mcastOption | copp:Mcast (scalar:Enum8) | Multicast options | SELECTION: 0 - Undefined 1 - dest-miss 2 - rpf-failure 3 - sg-rpf-failure 4 - ipv6-dest-miss 5 - ipv6-rpf-failure 6 - ipv6-sg-rpf-failure DEFAULT: Undefined |
Related Documentation
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
Creating a Policy Map
This example creates a policy-map with class-map that sets the COS, has a logging action, and has a policing action.
CLI Commands
The CLI commands and options listed below are the equivalent to the payload example displayed in the pane on the right.
policy-map type control-plane pmap1
class cmap1
set cos 3
logging drop threshold 1345 level 2
police cir 1345 pps bc 500 packets conform transmit violate drop
Note: The property information for this example was added in Release 9.3(3).
Verifying a DME Configuration
The following table contains the distinguished name (DN) for each managed object (MO) in the DME payload. Issue a GET request using the DN to verify the configuration was posted or to get information about the configured properties of a particular object.
MO | DN |
coppPolicy |
sys/copp/policy-{name} |
coppClassp |
sys/copp/policy-{name}/classp-{name} |
coppLogging |
sys/copp/policy-{name}/classp-{name}/logging-{threshold}-level-{levelRange} |
coppSetCos |
sys/copp/policy-{name}/classp-{name}/setCos-{cosVal} |
coppPolicerAction |
sys/copp/policy-{name}/classp-{name}/cir-{cirVal}-Unit-{cirUnit}-burst-{burstC}-bcUnit-{burstUnit} |
coppPolicy Properties
The following table contains information about the coppPolicy properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
name | string:Basic
| Policy-map name | A sequence of characters |
coppClassp Properties
The following table contains information about the coppClassp properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
name | string:Basic
| Class name | A sequence of characters |
coppLogging Properties
The following table contains information about the coppLogging properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
levelRange | copp:LevelRange (scalar:Uint16) | logging range | RANGE: [1 , 7] DEFAULT: 1 |
threshold | copp:IrVal (scalar:Uint64) | Logging Threshold | RANGE: [0, 18446744073709551615] |
coppSetCos Properties
The following table contains information about the coppSetCos properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
cosVal | copp:CosVal (scalar:Uint16) | Cos Value | RANGE: [0, 65535] |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
coppPolicerAction Properties
The following table contains information about the coppPolicerAction properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
burstC | copp:BurstVal (scalar:Uint32) | Burst count | RANGE: [0, 4294967295] |
burstUnit | copp:BurstUnit (scalar:Enum16) | BC unit | SELECTION: 0 - Unknown 1 - bytes 2 - kbytes 3 - mbytes 4 - packets 5 - us 6 - ms DEFAULT: Unknown |
cirUnit | copp:IrUnit (scalar:Enum16) | Cir rate | SELECTION: 0 - Unknown 1 - bps 2 - pps 3 - kbps 4 - mbps 5 - gbps DEFAULT: Unknown |
cirVal | copp:IrVal (scalar:Uint64) | Cir value | RANGE: [0, 18446744073709551615] |
conformAction | copp:ConformAction (scalar:Enum16) | Conform Action | SELECTION: 0 - Undefined 1 - transmit 2 - drop DEFAULT: Undefined |
flag | scalar:Bool
| Property Flag | SELECTION: true or false |
violateAction | copp:ViolateAction (scalar:Enum16) | Violate action | SELECTION: 0 - Undefined 1 - transmit 2 - drop DEFAULT: Undefined |
Related Documentation
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
Deleting a Policy Map
This example deletes a policy map.
Creating a Service Policy
This example creates a service policy.
Note: The property information for this example was added in Release 9.3(3).
Verifying a DME Configuration
The following table contains the distinguished name (DN) for each managed object (MO) in the DME payload. Issue a GET request using the DN to verify the configuration was posted or to get information about the configured properties of a particular object.
MO | DN |
coppService |
sys/copp/service-{name} |
coppService Properties
The following table contains information about the coppService properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
name | string:Basic
| service-policy name | A sequence of characters |
Related Documentation
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
Deleting a Service Policy
This example deletes a service policy.
Changing the Default CoPP Policy
This example applies a moderate default CoPP policy.
Note: The property information for this example was added in Release 9.3(3).
Verifying a DME Configuration
The following table contains the distinguished name (DN) for each managed object (MO) in the DME payload. Issue a GET request using the DN to verify the configuration was posted or to get information about the configured properties of a particular object.
MO | DN |
coppProfile |
sys/copp/profile |
coppProfile Properties
The following table contains information about the coppProfile properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
prof | copp:ProfT (scalar:Enum16) | Profile type | SELECTION: 0 - unknown 1 - strict 2 - moderate 3 - lenient 4 - dense DEFAULT: unknown |
Related Documentation
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
Applying a Scale Factor
This example applies a scale factor.
Note: The property information for this example was added in Release 9.3(3).
Verifying a DME Configuration
The following table contains the distinguished name (DN) for each managed object (MO) in the DME payload. Issue a GET request using the DN to verify the configuration was posted or to get information about the configured properties of a particular object.
MO | DN |
coppScale |
sys/copp/scale-{module} |
coppScale Properties
The following table contains information about the coppScale properties in the DME payload. For more information about the properties and MOs, see the NX-API DME Model Reference linked in the Related Documentation section below.
Property Name | Data Type | Description | Values |
module | scalar:Uint16
| Module number | RANGE: [0, 65535] |
scaleVal | scalar:Float
| scale factor value | A floating number per IEEE-754 standard |
Related Documentation
For other CLI options, see the Cisco Nexus 9000 Series NX-OS Command Reference:
http://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-command-reference-list.html
See the NX-API DME Model Reference for detailed information about classes and attributes described in the payload:
https://developer.cisco.com/site/nx-os/docs/nexus-model-reference/
For information about using the payloads, see the Cisco Nexus 9000 Series NX-OS Programmability Guide:
https://www.cisco.com/c/en/us/support/switches/nexus-9000-series-switches/products-programming-reference-guides-list.html
Deleting a Scale Factor