While implementing TTL security, you issue the PE(config-router-af)#neighbor 2.2.2.2 ttl-security hops 2 command. After you issue this command, which BGP packets does the PE accept?
Example: Router(config-router)# neighbor 10.1.1.1 ttl-security hops 2
The example configuration sets the expected incoming TTL value to at least 253, which is 255 minus the TTL value of 2, and this is the minimum TTL value expected from the BGP peer. The local router will accept the peering session from the 10.1.1.1 neighbor only if it is 1 or 2 hops away.
https://www.cisco.com/c/en/us/td/docs/ios/12_2sx/feature/guide/fsxebtsh.html
According to Cisco, the expected ping response from the neighbor should be 253 or greater because 255-253=2 or 255-254=1 which means that the neighbor is 2 or 1 hops away.
It's D
--------------------------------------------------
neighbor 10.1.1.1 ttl-security hops 2
The example configuration sets the expected incoming TTL value to at least 253, which is 255 minus the TTL value of 2, and this is the minimum TTL value expected from the BGP peer. The local router will accept the peering session from the 10.1.1.1 neighbor only if it is 1 or 2 hops away.
--------------------------------------------------------------
https://www.cisco.com/c/en/us/td/docs/ios/12_2sx/feature/guide/fsxebtsh.html#wp1059215
neighbor 10.1.1.1 ttl-security hops 2
The local router will accept the peering session from the 10.1.1.1 neighbor only if it is 1 or 2 hops away.
https://www.cisco.com/c/en/us/td/docs/ios/12_2sx/feature/guide/fsxebtsh.html#wp1059215
upvoted 1 times
...
This section is not available anymore. Please use the main Exam Page.350-501 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
rans3001
11 months agopicho707
1 year, 3 months agoBenxi
2 years, 2 months agochst
3 years, 1 month agochst
3 years, 2 months agothejag
2 years, 3 months agoMoks87
3 years, 7 months ago