NOTE
l
The
peer valid-ttl-hops
command run in the BGP view is also applicable to the BGP-
VPNv4 address family view, because both BGP and BGP-VPNv4 use the same TCP
connection.
l
The configurations of GTSM and EBGP-MAX-HOP affect the TTL values of sent BGP
packets, and the configurations of the two functions are mutually exclusive.
An interface board of a BGP device enabled with GTSM checks the TTL values in all
received BGP packets. In actual networking, packets with the TTL values out of a
specified range are either allowed to pass or discarded by GTSM. When the default
action of GTSM is drop, an appropriate TTL value range needs to be set based on the
network topology. Packets with the TTL values out of the range will be discarded.
This prevents bogus BGP packets from consuming CPU resources.
l
Set the GTSM default action.
Perform the following steps on a GTSM-enabled switch:
1.
Run:
system-view
The system view is displayed.
2.
Run:
gtsm default-action
{
drop
|
pass
}
The default action to be taken on the packets that do not match a GTSM policy is
Drop.
By default, the action to be taken on the packets that do not match the GTSM policy
is pass
NOTE
If the default action is configured but no GTSM policy is configured, GTSM does not take
effect.
l
Configure the log function for dropped packets.
Perform the following steps on a GTSM-enabled switch:
1.
Run:
system-view
The system view is displayed.
2.
Run:
gtsm log drop-packet
all
The log function is enabled on a specified board.
The log records information that GTSM drops packets, which helps locate faults.
----End
7.18.4 Checking the Configuration
After configuring BGP security, you can view authentication information about BGP peers.
Prerequisites
The BGP security configurations are complete.
S6700 Series Ethernet Switches
Configuration Guide - IP Routing
7 BGP Configuration
Issue 01 (2012-03-15)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
441
