security ttl
To specify that the time-to-live (TTL) value in the IP header of the packet is used to validate that a packet is
from the expected source, use the security ttl command in SSRP configuration mode. To remove the TTL
requirement, use the no form of this command.
security ttl max-hops number
no security ttl max-hops number
Syntax Description
Maximum number of hops between the peer routers.
max-hops number
Command Default
The max-hops default is 255.
Command Modes
SSRP configuration
Command History
ModificationRelease
This command was introduced.Release 3.9.0
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task
IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator
for assistance.
If max-hops is not specified, the TTL value must be 255 for a packet to be accepted.
Task ID
OperationsTask ID
read, writeppp
Examples
The following example shows how to specify that the time-to-live (TTL) value in the IP header of a packet
is used to validate that the packet is from the expected source:
RP/0/RSP0/CPU0:router# config
RP/0/RSP0/CPU0:router(config)# ssrp profile Profile_1
RP/0/RSP0/CPU0:router(config-ssrp)# peer ipv4 address 10.10.10.10
RP/0/RSP0/CPU0:router(config-ssrp)# security ttl max-hops number 50
Cisco ASR 9000 Series Aggregation Services Router Interface and Hardware Component Command Reference,
Release 5.3.x
756
PPP Commands onthe Cisco ASR 9000 Series Router
security ttl