blocking packet with ttl 1 or 0 on 6509

Unanswered Question
Jun 23rd, 2010
User Badges:

I am using a cisco  609 with  sup 720 and PFC3 card .I was wondering if there is way to  block the packet that  hits the  6509 with ttl1 vlaue of 1 or 0 .



Ajai

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
francisco_1 Wed, 06/23/2010 - 03:14
User Badges:
  • Gold, 750 points or more

You could use TTL filtering in ACLs to filter packets with specific TTL value to protect the local device and downstream from TTL expiry attack

Or on the 6500 you could use hardware-based rate limiters to protect the local device from TTL expiry attacks.


Flexible packet matching can be used to filter on specific fields within the IP packet hearders including TTL value.



Francisco

Actions

This Discussion