[c-nsp] Dynamic ACL

[Wes Smith]

You would use a QOS policer/ rate limit policy for this
The policer would pass the traffic upto it’s limit and then discard the rest
The policer can look at anything an ACL can

There are examples on the net re hardening an edge router

https://www.bing.com/search?q=cisco+router+harden+rate+limit



Sent from Mail<https://go.microsoft.com/fwlink/?LinkId=550986> for Windows 10

From: Satish Patel<mailto:satish.txt at gmail.com>
Sent: Monday, May 9, 2016 4:03 PM
To: Cisco Network Service Providers<mailto:cisco-nsp at puck.nether.net>
Subject: [c-nsp] Dynamic ACL

Is there a way in cisco i can put logic if bandwidth utilization is
above 5G then apply specific ACL (example, deny ip any any fragments)

I don't want packet travel all the time through ACL, I can set trigger
them on event.
_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/