What sort of DDoS are you experiencing? I have never had trouble logging in to the main router to block an IP. Actually we typically log in and drop a BGP route for a minute or two.
I've Tried this with 100mbps and 1gbps of small packets to a single IP address.