IOS Firewall and UDP Flood Question

[drummond.r]

okie, i've been working with IOS for about 8 years now, but have ever used IOS firewall so i could use a little help.

here is my situation:

we've been getting hit udp flood attacks a lot lately, our firewall (not a pix :-() can't handle the load of the attacks. i was wondering what i could do possibly with IOS firewall to stop these attacks at the edge....any help would be appreciated.

thanks in advance,

rob

[kamal-learn]

hi

you can use CBAC,a set of firewall feature within the IOS. you will use a inspection rule

for UDP and any other protocol you count use such tcp, ftp ,and apply it to the interface,with an access-list.

(so there is some parameters such as ,

max-incomplete,synwait-time..,udp idle-time...)

HTH

Pls do rate if it helps

[drummond.r]

do you have a few basic examples that would get me started?

[kamal-learn]

hi

here are some url:

http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a0080094e8b.shtml

http://www.cisco.com/en/US/products/ps5854/prod_configuration_guide09186a00802c9587.html

HTH