RE: Cisco HSRP Denial of Service Vulnerability [7:3534]

[Andy Low]

Yes, seem like that's the current solutions. But this will create high
overhead on routers, imagine every 3 secs of Hello packets means every 3
secs of encryption and decrytion and what if there are multiple groups?



-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Jacques Atlas
Sent: Tuesday, May 08, 2001 2:10 PM
To: [EMAIL PROTECTED]
Subject: RE: Cisco HSRP Denial of Service Vulnerability [7:3534]


On Tue, 8 May 2001, Curtis Call wrote:

|In other words always use authentication.

i dont think the authentication in clear text is going to help,
the solution from the vendor is to run HSRP with IPSec.

--
jacques
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=3567&t=3534
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]