Hi,

On Tue, Nov 04, 2008 at 05:20:39PM +0100, Nemeth Laszlo wrote:
> So the question: can i limit the number of ACK/RST packets/sec what the 
> router send back to the SYN sender?

Yes.  Check www.cisco.com for "control-plane policing" (CoPP) - this
is exactly what you need.

It needs a bit of consideration what sort of packets the router is meant
to receive ("routing protocols", anyone?) and you should lab-test it before
rolling out on production routers.

gert
-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             [EMAIL PROTECTED]
fax: +49-89-35655025                        [EMAIL PROTECTED]

Attachment: pgp1ibtfsq8tl.pgp
Description: PGP signature

_______________________________________________
cisco-nsp mailing list  [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Reply via email to