2811 Router and TCP Intercept for attacks configuration file

mike.mckenney · ‎08-10-2010

I am looking for a best practices guide or configuraiton for TCP Intercept. I have and IPS module. It crashes constantly. Cisco recommended blocking Syn and DoS attacks on the router. I have the enterprise version of IOS. It supports it. I am looking information on how to configure it properly.

andhingr · ‎08-19-2010

Here is the doc link for configuring TCP intercept

http://www.cisco.com/en/US/docs/ios/11_3/security/configuration/guide/scdenial.html

you can also enable IOS-FW featureset on the router which has DoS attack prevention built in

http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a0080094e8b.shtml

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5708/ps5710/ps1018/product_implementation_design_guide09186a00800fd670.html

Regards,

- AD