proxmox-mirrors/mirror_frr
1
0
Fork 0
mirror of https://git.proxmox.com/git/mirror_frr synced 2025-04-29 10:11:52 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

doc: document ldpd's "ttl-security" commands

Browse Source 
Signed-off-by: Renato Westphal <renato@opensourcerouting.org>
This commit is contained in:
Renato Westphal 2022-06-15 14:12:35 -03:00
parent 45f64029dc
commit 62e91cdcf2
1 changed files with 28 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
doc/user/ldpd.rst
View File

@ -128,6 +128,21 @@ LDP Configuration
the IPv4 or IPv6 transport-address used by the LDP protocol to talk on this the IPv4 or IPv6 transport-address used by the LDP protocol to talk on this
interface. interface.
.. clicmd:: ttl-security disable
Located under the LDP address-family node, use this command to disable the
GTSM procedures described in RFC 6720 (for the IPv4 address-family) and
RFC 7552 (for the IPv6 address-family).
Since GTSM is mandatory for LDPv6, the only effect of disabling GTSM for the
IPv6 address-family is that *ldpd* will not discard packets with a hop limit
below 255. This may be necessary to interoperate with older implementations.
Outgoing packets will still be sent using a hop limit of 255 for maximum
compatibility.
If GTSM is enabled, multi-hop neighbors should have either GTSM disabled
individually or configured with an appropriate ttl-security hops distance.
.. clicmd:: neighbor A.B.C.D password PASSWORD .. clicmd:: neighbor A.B.C.D password PASSWORD
The following command located under MPLS router node configures the router The following command located under MPLS router node configures the router
@ -143,6 +158,19 @@ LDP Configuration
this time of non response, the LDP established session will be considered as this time of non response, the LDP established session will be considered as
set to down. By default, no holdtime is configured for the LDP devices. set to down. By default, no holdtime is configured for the LDP devices.
.. clicmd:: neighbor A.B.C.D ttl-security disable
Located under the MPLS LDP node, use this command to override the global
configuration and enable/disable GTSM for the specified neighbor.
.. clicmd:: neighbor A.B.C.D ttl-security hops (1-254)
Located under the MPLS LDP node, use this command to set the maximum number
of hops the specified neighbor may be away. When GTSM is enabled for this
neighbor, incoming packets are required to have a TTL/hop limit of 256
minus this value, ensuring they have not passed through more than the
expected number of hops. The default value is 1.
.. clicmd:: discovery hello holdtime HOLDTIME .. clicmd:: discovery hello holdtime HOLDTIME
.. clicmd:: discovery hello interval INTERVAL .. clicmd:: discovery hello interval INTERVAL