security ttl
To specify that the time-to-live (TTL) value in the IP header of the packet is used to validate that a packet is
from the expected source, use the
security ttl
command in SSRP configuration mode. To remove the TTL
requirement, use the no form of this command.
security ttl max-hops number
no security ttl max-hops number
Syntax Description
Maximum number of hops between the peer routers.
max-hops number
Command Default
The
max-hops
default is 255.
Command Modes
SSRP configuration
Command History
Modification
Release
This command was introduced.
Release 3.9.0
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task
IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator
for assistance.
If
max-hops
is not specified, the TTL value must be 255 for a packet to be accepted.
Task ID
Operations
Task ID
read, write
ppp
Examples
The following example shows how to specify that the time-to-live (TTL) value in the IP header of a packet
is used to validate that the packet is from the expected source:
RP/0/RSP0/CPU0:router#
config
RP/0/RSP0/CPU0:router(config)#
ssrp profile Profile_1
RP/0/RSP0/CPU0:router(config-ssrp)#
peer ipv4 address 10.10.10.10
RP/0/RSP0/CPU0:router(config-ssrp)#
security ttl max-hops number 50
Cisco ASR 9000 Series Aggregation Services Router Interface and Hardware Component Command Reference,
Release 5.3.x
756
PPP Commands onthe Cisco ASR 9000 Series Router
security ttl