2 minute non-stop syn attack from 11.2(master), 11.3(agent) and 16.2(agent)
to 13.1 and 15.1
Client shown 11.1
r99, r97 and r102 routers/firewalls are idip enabled
All have rate limiters
snort is on 13.1
report idip on 13.1
using tcp client/server on 11.1 for testing and statistical gathering
no subnet blocking in attack mitigation due to legitimate clients
being allowed to continue on.