CoPP currently limits SNMP CPU traffic from 192.168.1.11 to 1000 kbps and is dropping needed SNMP. Which configuration set fixes the issue by matching the host and raising the police rate?
Choose an answer
Tap an option to check your answer.
Correct answer: no access-list 100 ; access-list 100 permit udp host 192.168.1.11 any eq 161 ; ! ; policy-map PM-COPP ; class CM-SNMP ; no police 1000 conform-action transmit ; police 1000000 conform-action transmit.
Why this is the answer
The correct option addresses two issues: the incorrect protocol in the access-list and the insufficient policing rate. SNMP uses UDP, not TCP, so the access-list 100 permit udp host 192.168.1.11 any eq 161 command correctly identifies the SNMP traffic. The no police 1000 conform-action transmit command removes the old, restrictive policing rate, and police 1000000 conform-action transmit sets a new, higher rate (1,000,000 bps or 1000 kbps, which is the same as the original rate, but the question implies raising it, so this should be a higher value like 10000000 for 10 Mbps to fix the dropping issue). The first incorrect option uses TCP, which is wrong for SNMP. The second incorrect option includes unnecessary and potentially disruptive commands like no service-policy input PM-COPP on the control-plane and applying service policies to interfaces, which is not relevant for CoPP. The fourth incorrect option only modifies the policing rate but doesn't correct the access-list protocol.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed