Brute force attack mitigation on Ciscos

Hi:

The subject says it all (almost).  Is there a way to do this, vis-a-vis 
bruteblockd, fail2ban, etc?  Perhaps via SNMP?

The Cisco in question is also a radius client for a PPTP VPN and is 
getting hammered on port 1723 by auth requests...so it would be nice if it 
could work on radius as well as local auth.  None of the aaa commands seem 
to do what we want.

aaa local authen attempts

only does local, not radius, and it's not clear what it does after x 
number of attempts...disable that user?  Block that IP?  For how long?

aaa authen attempt

looks like it *might* do radius, but again, what exactly does it do?

TIA,

James Smallacombe		      PlantageNet, Inc. CEO and Janitor
[email protected]							    http://3.am
=========================================================================
-- 
Eat sushi frequently. - Avi
[email protected] is the human contact address.
[email protected] is the list posting address.
See below URL for subscribe/unsubscribe and list options:
http://inet-access.net/mailman/listinfo/list