How do I prevent DoS on Cisco Router ?

[sandiego1]

I got new Cisco 1800 router with IOS 12.4.
How can I prevent DoS, .. ping of death.
Any hints on configuration ?

Regards to all,

Mitch

 

[amorielljr]

Depending on which IOS you purchased (Advanced Security or higher) you can use the IPS feature to drop packets for which there are signitures. The following is a link on how to configure the IOS IPS.

http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124tcg/tsec_c/tsec_ips.htm

 

[sandiego1]

Thank you amorielljr.

Since my IOS does not support IPS, is there a way to turn echo protocol off, so nobody can ping this router ?

 

[BuckWeet]

are you using ip inspection?

 

[sandiego1]

I am not using ip inspection.

 

[vlf]

Put an access list on the interfaces, denying icmp and permitting everything else.