Router Security Strategies: Securing IP Network Traffic Planes provides a comprehensive-hensive approach to understand and implement IP traffic plane separation and protection on IP routers. Techniques to secure the IP data plane, IP control plane, IP management plane, and IP services are discussed in detail in the second part. The final section provides case studies from both the perspective of the corporate network and service provider network. In this way, the individual IP traffic plane security techniques reviewed in the second part of this book brought together to help you make a defense, an integrated comprehensive and broad in-depth security architecture. Understanding and? Securing IP traffic planes are important to the overall security posture of the IP infrastructure. As the vulnerability of the economy continues to mature, it is very important for both vendors and network providers to jointly provide this protection to IP infrastructure.? Russell Smoak, Director, Service Engineering, Security Intelligence Engineering, Cisco? Gregg Schudel, CCIE No. David focuses on IP core and edge architectures including IP routing, MPLS technologies, QoS, infrastructure security, and network telemetry. Understand the operation of IP networks and routers Learn about threat models facing IP networks, Layer 2 Ethernet switching environments, and IPsec and MPLS VPN services Learn how to segment and protect each IP traffic plane by applying the principle of defense in depth and breadth of Use security techniques such as ACL, limiting, IP Options filtering, uRPF, QoS, RTBH, QPPB, and many others to protect the data plane IP and Ethernet network switch Secure the IP control plane with rACL, Copp, GTSM, MD5, BGP and ICMP techniques and Layer 2 switched Ethernet-engineering Protect specific IP management plane with password management, SNMP, SSH, NTP, AAA, as well as other VPN management, out-of-band management, and management techniques Secure remote access IP services plane using recoloring, IP fragmentation control, MPLS label control, and other traffic classification and process control techniques Security book is part of the Cisco Press Networking Technology Series. Security titles from Cisco Press help networking professionals secure critical data and resources, prevent and reduce network attacks, and build self-defending network end-to-end.