BGP ttl-security
Hi, Douglas,
Did you use “neighbor ttl-security” on both site of the neighborhood? or use “neighbor ttl-security” on one site and use “neighbor ebgp-multihop” on another site?
You have to use “neighbor ttl-security hop” in the peer sessions of each nodes.
The two commands are different on the inital TTL value on the message. The drop-off TTL threshold are different too. For example, “neighbor ebgp-multihost 4″ set intial value TTL=4 on the peer message and drop off the peer message if TTL = 0.
“neighbor ttl-threshold hop 4″ uses default TTL=255 on the outgoing peer message and drops off the ingress message if it’s TTL = 251.
HTH
On Sun, Mar 2, 2008 at 5:34 AM, Todd, Douglas M. wrote:
> Hey All: > > (PS: My last name is Todd, First name is Douglas) > > I have used the ttl-security feature in place of the ebgp-multihop. My > routes > are inaccessible, regardless of the hop count used. > > Process: > > 1) I do a trace from source to destination > 2) 4 hops are seen > 3) add 1 hop to the 4 > 4) I have 5 hops now. > > nei a.b.c.d ttl-security hop 4 > > I have tried 5 hops, 6 hops 7 hops. The neighbor comes up, route are > inaccessible. If I use multihop, routes are fine. > > Some ideas? > > Thanks. > > Douglas > > > > > The information transmitted in this electronic communication is intended > only > for the person or entity to whom it is addressed and may contain > confidential > and/or privileged material. Any review, retransmission, dissemination or > other > use of or taking of any action in reliance upon this information by > persons or > entities other than the intended recipient is prohibited. If you received > this > information in error, please contact the Compliance HelpLine at > 800-856-1983 and > properly dispose of this information. > > _______________________________________________________________________ > Subscription information may be found at: > http://www.groupstudy.com/list/CCIELab.html
























