Cisco Systems EA6500 Manual De Usuario

This chapter contains information on how to protect your system against Denial of Service (DoS) 
attacks. The information covered in this chapter is unique to the Catalyst 6500 series switches, and it 
supplements the network security information and procedures in the 

 in 

this publication as well as the network security information and procedures in these publications:

Cisco IOS Security Configuration Guide, Release 12.2, at this URL:

Cisco IOS Security Command Reference, Release 12.2, at this URL

This chapter consists of these sections:

The DoS protection available on the Catalyst 6500 series switch provides support against two types of 
DoS attack scenarios:

Data-packet processing that starves routing-protocol processing may result in DoS attacks such as the 
following:

Routing peer loss due to hello timeouts

HSRP peer loss due to hello timeouts

Rrouting protocol slow convergence

Data packets congesting a CPU inband datapath may result in DoS attacks such as the following:

Routing peer loss due to hello packet drops

HSRP peer loss due to hello packet drops

DoS protection used at the local router may not prevent peer loss caused by data-packet congestion on 
the external link.