DDoS attack prevention on 9000 series switch

[SY Ham]

Hi,

Please let me know what kind of default or optional settings on 9000 series switches are provided to protect from the DDos attacks.

Regards,

Sangyeon Ham

[MHM Cisco World · Accepted solution]

The SW have CoPP to protect SW itself from DDoS but not protecting clients connected to SW.  For clients you need FW. 

MHM

[Leo Laohoo]

Introduction ASAc Firewall on Catalyst 9300 Series

[balaji.bandi]

9000 series switches

We need to know what 9K switches , Nexus or catalyst.

If design properly you mitigate different ways in the enterprise Lan and DC environment.

if the device expose to internet  that have different design all together

So considering the design very important, there are many ways to do and prevent vs protect. 

@Leo Laohoo mentioned good option recently tested on cat 9K switches

Note : default have minimal config, you need to build on top what kind of level of protection you need.