Securing Border Routers

Thu Jan 20 01:38:39 UTC 2011

What an insightful link! Thank you, I am reading it now.....

> From: Bryan.Welch at arrisi.com
> To: nanog at nanog.org
> Date: Wed, 19 Jan 2011 16:38:43 -0800
> Subject: RE: Securing Border Routers
> 
> I ALWAYS start with the CYMRU secure bgp templates, found here:
> http://www.team-cymru.org/ReadingRoom/Templates/secure-bgp-template.html
> 
> I personally would not recommend a firewall in front of your router, sufficient ACL'ing should be enough for securing the router itself.
> 
> 
> Bryan
> 
> -----Original Message-----
> From: Brandon Kim [mailto:brandon.kim at brandontek.com] 
> Sent: Wednesday, January 19, 2011 4:36 PM
> To: nanog group
> Subject: Securing Border Routers
> 
> 
> Gents:
> 
> What measures do you take to protect your border routers? Our routers are running BGP so I'm interested if there is any way to secure them without interfering with BGP? Is it normal to put a firewall in front of the border routers?
> 
> I'm concerned about DDOS attacks mainly....although we haven't had any, I don't welcome them.....
> 
> Brandon
> 
> 
> 
> 
>  		 	   		  
> 