[c-nsp] IKEv2 unknown connections

[Dobbins, Roland]

On 3 Jan 2019, at 16:58, Robert Hass wrote:

> How I can check which IP is trying constantly connect via IKEv2 to my 
> router ?

Use flow telemetry to look for incoming traffic directed to your router 
on UDP/4500?

You could also use a classification ACL.  Or if your circumstances 
permit, just use an iACL to deny this traffic from all but designated 
IPs.

--------------------------------------------
Roland Dobbins <roland.dobbins at netscout.com>