A network engineer reviews a core router that recently experienced high CPU utilization during a flood of routing protocol and ICMP traffic destined to the router itself. The security team wants to harden the device so that legitimate management and routing traffic is preserved while abusive traffic aimed at the router's own processor is rate-limited. Which network hardening control should the engineer implement?