R3303-HP HSR6800 Routers Layer 3 - IP Routing Command Reference

462
# Configure both the keepalive interval and holdtime interval for peer group test as 0 seconds,
indicating the peer group will never time out.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv6-family
[Sysname-bgp-af-ipv6] group test external
[Sysname-bgp-af-ipv6] peer test timer keepalive 0 hold 0
Related commands
timer
peer ttl-security hops (IPv6 address family view)
Use peer ttl-security hops to configure Generalized TTL Security Mechanism (GTSM) to check IPv6 BGP
or relevant TCP packets from the specified peer/peer group.
Use undo peer ttl-security hops to restore the default.
Syntax
peer { group-name | ipv6-address } ttl-security hops hop-count
undo peer { group-name | ipv6-address } ttl-security hops
Default
GTSM is not configured.
Views
IPv6 address family view
Default command level
2: System level
Parameters
group-name: Name of a peer group, a string of 1 to 47 characters.
ipv6-address: IPv6 address of a peer.
hop-count: Hop count value in the range of 1 to 254.
Usage guidelines
With the peer ttl-security hops command configured, the device checks whether the Hop Limit in a
packet received from the peer falls into the valid hop limit range [255-hop-count+1,255] (the hop-count
is specified by this command). If yes, the packet is delivered to the CPU. Otherwise, the packet is
discarded. Thus, GTSM prevents CPU utilization based attacks, and enhances system security. In addition,
with GTSM configured, the device will send packets with hop limit 255.
The peer ttl-security hops command and the peer ebgp-max-hop command are mutually exclusive.
You must configure GTSM on both the local and peer devices, and you can specify different hop-count
values in a valid range for them.
Examples
# Configure GTSM for IPv6 BGP peer group test.
<Sysname> system-view
[Sysname] bgp 100