What is the benefit by Disabling " IP particle-based fast fragmentation " service on Cisco routers ?
Thanks in Advance, Sajith
3
-
What router is it and what IOS version are you running?– user36472Commented Feb 20, 2018 at 18:48
-
ios 15.6(2)T, ADVENTERPRISEK9-M– Sajith S.KCommented Feb 20, 2018 at 21:48
-
I have asked about this on Cisco Support forums, will post if i get any answer.– user36472Commented Feb 21, 2018 at 14:59
Add a comment
|
1 Answer
So according to a Mark Malone, CCIE on Cisco support, the command is used to turn off the security feature to prevent fragmentation attacks that can occur on interfaces for DDoS (it's turned on by default).
IP fragmentation attacks are a common form of denial of service attack, in which the perpetrator overloads a network by exploiting datagram fragmentation mechanisms.
So remember when using service disable-ip-fast-frag your router could be vulnerable to fragmentation attacks.
