Re: ebgp-multihop vs. disable-connected-check

Water,

BTW, Petr is 100 percent correct.

When it comes to TTL, and* If i remember this correctly*:

Let's say R1 is directly connected to R2, and if these two routers are using
their Lo0 interfaces to establish the BGP connection, they have few options:

Option 1)- If "ebgp-multihop 2" is used, even though it has to be configured
on both sides, the TTL of the "syn" packet will be set to 2, but the TTL of
the "Syn Ack" packets will be 255.

Option 2)- If "Disable-connected-check" is used, the TTL of the "syn" packet
is 1, whereas, the TTL of the "Syn Ack" is once again 255.

Option 3)- If the "TTL-Security hops 2" is used, the TTL of every packet
sent is 255, but the received packets Must have a TTL Greater than or equal
to 253. Which means that its 2 hops away.

I hope this helped.

On Mon, Aug 9, 2010 at 12:15 PM, rakesh madupu <raaki.88_at_gmail.com> wrote:

> disable-connected~update-source!=ebgp mhop
>
> you may use disable connected/update source simultaneously per situation
> with ebgpmultihop/ttl-security
> -
> I have super powers i just dont wanna show you..
>
> www.cciematrix.com
> ccna,mcse,mcitp,jncia,jncis,jnsa-adtm,sol,srx,m/mx,dc
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
>

-- 
Narbik Kocharians
CCSI#30832, CCIE# 12410 (R&S, SP, Security)
www.MicronicsTraining.com <http://www.micronicstraining.com/>
Sr. Technical Instructor
YES! We take Cisco Learning Credits!
Training And Remote Racks available
Blogs and organic groups at http://www.ccie.net