TNS Listener Poison Attack using VNCR

For TNS Poisoning (Oracle Security Alert for CVE-2012-1675), Oracle first recommended implementing "Class of Secure Transport" (COST) to handle the instance registrations, but now "Starting with Oracle Database Version 11.2.0.4 and Oracle Database 12c (12.1.0.1), the screening of service registration requests from database instances is performed using the Oracle Listener inherent "Valid Node Checking for Registration" (VNCR) feature. Oracle recommends using the "VNCR" feature in 11.2.0.4 and 12c as an alternative to COST if the implementation is only to regulate database service registration requests with Listeners."

For 12c: OraAgent is automatically handling the setup.  For 11.2.0.4, this is not being done and I cannot find a document detailing the listener.ora changes (and possibly any init parameter changes) to prevent TNS Listener Poison Attack using VNCR for Standalone/Restart and for RAC.