Handling DDOS attacks

[John Blakley]

How do you suggest mitigating DDoS attacks with regular 2800/3700 series routers?

Thanks!

John

[Jon Marshall]

John

In addition to access-lists used to control access to the vty lines/snmp/ntp etc. you can also have a look at COPP - Control Plane Policing - see this attached link for details on how it works -

http://www.cisco.com/web/about/security/intelligence/coppwp_gs.html

One other point, i have never implemented COPP so can't say how well it performs or more importantly what extra resources it places on the router.

Jon

[johnlloyd_13]

you may enable the IOS IPS feature on these routers and download the latest signature file from cisco's website. depending how big your network and applications you're using, it may eat up the router's cpu and memory. this feature may be used as an interim while you plan to purchase a dedicated appliance for security.