When Control Plane Policing causes routing protocol flaps, which action prevents flapping while still validating policy and rates?

When troubleshooting Control Plane Policing (CoPP) that causes routing protocol flaps, the best initial approach is to set both conform-action and exceed-action to transmit. This allows all traffic to pass through the policy without being dropped, enabling you to validate your Access Control Lists (ACLs) and observe the actual traffic rates hitting the policy without disrupting routing. CoPP policies are typically applied in the input direction to protect the router's control plane from incoming malicious or excessive traffic. Applying it in the output direction would not protect the router itself. Setting exceed-action to drop prematurely could cause the very routing flaps you are trying to prevent before you have validated the policy's configuration.