- Option to use Kerberos (V5) for authentication when accessing router.
- Option to encrypt an entire session to the router.
- Complete packet filtering allows matching on source IP address.
- Provide ability to rate limit (or disable) ICMP messages sent by the router.