set protocols mpls ldp neighbor ttl-security disable


The set protocols mpls ldp neighbor ttl-security disable command disables Generalized TTL Security Mechanism (GTSM), as specified in RFC 5082.

The delete protocols mpls ldp neighbor ttl-security disable command deletes the configuration.

 

Command Syntax

set protocols mpls ldp neighbor <ip> ttl-security disable

delete protocols mpls ldp neighbor <ip> ttl-security

 

Parameter

Parameter

Description

neighbor <ip>

Specifies the IPv4/IPv6 address of an LDP peer.

 

Usage Guidelines

Disabling TTL security means that the router will not enforce TTL checks for packets from this neighbor, potentially making the system less secure. TTL security is often used to mitigate spoofing attacks where an attacker attempts to establish an LDP session by sending fake packets with a manipulated TTL value.

This might be necessary if compatibility with older or certain specific devices that do not support TTL security is required.

NOTE:

The commands set protocols mpls ldp neighbor <ip> ttl-security hops <integer> and set protocols mpls ldp neighbor <ip> ttl-security disable cannot be configured simultaneously.

 

Example

  • Disable Generalized TTL Security Mechanism (GTSM).

admin@PICOS# set protocols mpls ldp neighbor 2.2.2.2 ttl-security disable admin@PICOS# commit

 

 

Copyright © 2024 Pica8 Inc. All Rights Reserved.