CAR Security Design

[kgispanski]

I have been looking for a good document that describes how to configure the CAR feature to reduce denial of service attacks (DOS). I believe you should set thresholds for several services, such as ICMP, TCP sync's.... Can you please help me find a links that will describe this feature from a security view.

Thank you,

Karen

[r-simpson]

Take a look at this document. It may help you out: http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/12cgcr/qos_c/qcpart4/qcpolts.htmThere are other tools to identify and control DOS attacks too. Take a look at http://www.cisco.com/warp/public/707/22.html http://www.cisco.com/go/ids and http://www.cisco.com/warp/public/cc/pd/sqsw/sqidsz/prodlit/idsf_ds.htm

[wraights]

try this site as well...

http://www.eecostructure.com/blueprint_rec/network_security_analysis_and_recommendations.htm