The policy-map COPP-7600 only rate-limit HTTP & HTTPS traffic (based on the ACL conditions) so any BGP packets will be processed in the class "class-default", which drops exceeded BGP packets. Therefore we have two ways to solve this problem: + Add BGP to the ACL with the statement "permit tcp any any eq bgp" + Configure higher value for CIR in default class as 2Mbps is too low for web traffic (http & https)