[c-nsp] 12.3(11)T fix for cisco-sa-20051114-ipsec

Peter Hicks peter.hicks at poggs.co.uk
Wed Dec 14 06:08:36 EST 2005


All,

I have the an 837 with 32Mb RAM, 8Mb flash and have to run 12.3(7)T as
12.3(11)T8 requires 48Mb RAM, and I assume 12.3(11)T9, when released, will
need similar.

A RAM upgrade is difficult - we have no technical staff on-site.

What is the best way to protect the router?  Is it largely sufficient to put
an access list on the Internet-facing port to block IKE traffic from
addresses other than the VPN routers at our central site?

Best wishes,


Peter.


More information about the cisco-nsp mailing list