Best Practice Detail

13-8-8041

Equipment Suppliers should provide filters and access lists on the header fields, for layer 3 switches/routers, with interfaces that mix user and control plane data, to protect the control plane from resource saturation by filtering out untrusted packets destined to for control plane. Measures may include: 1) Allowing the desired traffic type from the trusted sources to reach the control-data processor and discard the rest, 2) separately rate-limiting each type of traffic that is allowed to reach the control-data processor, to protect the processor from resource saturation.

Status: Rollover New

References/Comments:

Historical events:

• Equipment Suppliers
• Internet/Data
• Cyber Security
• Network Elements
• Network Operations
• CSRIC VII: Rollover New In CSRIC VII