TCP Intercept Watch Mode


Scenario:

As part of the security team you are always looking for ways to improve security within the company. Lately the company is under fire by TCP SYN floods. You don’t have any budget to buy some firewalls so you decide to look for a cheaper solution to solve this problem. You heard some good things about the “TCP Intercept” feature so you decide to look into it.

Goal:

  • All IP addresses have been configured for you, look at the topology picture for the IP addresses.
  • OSPF has been preconfigured for you on all routers.
  • Configure router Mirror so it resets all connections that don’t finish the TCP 3 way handshake within 10 seconds by sending a RST to router Flash.

Topology:

TCP Intercept Watch Mode

Video Solution:

Configuration Files

You need to register to download the GNS3 topology file. (Registration is free!)

Once you are logged in you will find the configuration files right here.

Opt In Image
Do you want your CCNA or CCNP Certificate?

The How to Master series helps you to understand complex topics like spanning-tree, VLANs, trunks, OSPF, EIGRP, BGP and more.

Written by René Molenaar - CCIE #41726

You May Also Like

About the Author: Rene Molenaar

René - CCIE #41726 is the creator of GNS3Vault.com where he shares CCNA, CCNP and CCIE R&S labs. He also blogs about networking on http://networklessons.com

1 Comment

Comments are closed.