Can someone recommend good network level solutions for IP authentication to prevent/mitigate botnet attacks?

Such as, Limiting the amount of nodes in a Class C IP range connecting to a network etc. ?