Question

A network engineer configures CoPP on a core router to protect the control plane. After applying the policy, routine management traffic works, but scheduled firmware pushes to the router via TFTP now fail intermittently, and 'show policy-map control-plane' shows a rising drop counter in class-default. The engineer's policy has explicit classes for SSH, SNMP, and OSPF with generous rates, plus a class-default with 'police rate 8000 pps conform-action transmit exceed-action drop'. Which action best resolves the TFTP failures without weakening protection for other traffic?

Accepted Answer

Create a dedicated class matching the TFTP traffic (UDP/69) with an appropriate policed rate and place it before class-default in the policy-map.

Answer

Change the class-default exceed-action to transmit so no control-plane traffic is ever dropped.

Answer

Increase the OSPF class police rate, since firmware transfers rely on the routing protocol classes.

Answer

Remove the SNMP class so its bandwidth can be reused by TFTP in class-default.