Checking The Configuration - Huawei S6700 Series Configuration Manual

S6700 Series Ethernet Switches
Configuration Guide - IP Routing
l
l
----End

7.18.4 Checking the Configuration

After configuring BGP security, you can view authentication information about BGP peers.
Prerequisites
The BGP security configurations are complete.
Issue 01 (2012-03-15)
NOTE
l The peer valid-ttl-hops command run in the BGP view is also applicable to the BGP-
VPNv4 address family view, because both BGP and BGP-VPNv4 use the same TCP
connection.
l The configurations of GTSM and EBGP-MAX-HOP affect the TTL values of sent BGP
packets, and the configurations of the two functions are mutually exclusive.
An interface board of a BGP device enabled with GTSM checks the TTL values in all
received BGP packets. In actual networking, packets with the TTL values out of a
specified range are either allowed to pass or discarded by GTSM. When the default
action of GTSM is drop, an appropriate TTL value range needs to be set based on the
network topology. Packets with the TTL values out of the range will be discarded.
This prevents bogus BGP packets from consuming CPU resources.
Set the GTSM default action.
Perform the following steps on a GTSM-enabled switch:
1. Run:
system-view
The system view is displayed.
2. Run:
gtsm default-action { drop | pass }
The default action to be taken on the packets that do not match a GTSM policy is
Drop.
By default, the action to be taken on the packets that do not match the GTSM policy
is pass
NOTE
If the default action is configured but no GTSM policy is configured, GTSM does not take
effect.
Configure the log function for dropped packets.
Perform the following steps on a GTSM-enabled switch:
1. Run:
system-view
The system view is displayed.
2. Run:
gtsm log drop-packet all
The log function is enabled on a specified board.
The log records information that GTSM drops packets, which helps locate faults.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
7 BGP Configuration
441