I got quite some mails in the past of people, asking me how creative we might be to filter traffic and perform some kind of security on a Cisco device.

Probably the most interesting features are:

• Access Lists
• Context Based Access Control (CBAC)
• Reflexive Access Lists
• Lock and Key (dynamic access-lists)
• Zone-Based Firewall
• TCP Intercept (to prevent DoS attacks)
• uRPF

I will try to hightlight some of them within my next posts and show you how to solve standard problems within a service provider network.

If you have special requests just drop me some comments.