Protect internet Router from ddos attack

[Steev112]

Hello,

i have small router 2911 connected the main internet router GSR this GSR has peering with ISPs , there is default route on 2911 send to GSR and all user connect on 2911 will go from 2911 to GSR, i had attack ddos attack on 2911 my question how can protect 2911 from this kind of attack, i have some queries if you can help me:

1. what is the access-list need to configure to protect the router 2911.for example ICMP, HTTP.......

2. what is the COOP configuration to allow us to able to access this router when attack and CPU high.

3. i heard ASR and 7200 has some feature to protect these router from ddos attack, is helpful for all kind of dedos attack

thanks in advanced.

[Anim Saxena]

Hi Steven,

Kindly have a look at the link mentioned below might be helpful to you.

Protection against DDOS

Regards,

Anim Saxena

Community Manager

[Steev112]

Hi Anim,

Thank you for a useful document and appreciate your assistant

[Steev112]

Hi Anim,

if i  configure a Zone Based Firewall on  router it can protect the router from DDOS attack becuase that time attack type was UDP streaming

Thanks

[Anim Saxena · Accepted solution]

Hi Steven,

Have a look at the below mentioned link:

DDOS Protection

DDOS Protection 2

Regards,

Anim Saxena

Community Manager

*do rate helpful posts*