Re: OSPF TTL Security

I know... am I like the only non-CCIE who gets an exclusive honorary invite?

Darby

http://www.darbyslogs.blogspot.com

On Tue, Apr 26, 2011 at 2:17 PM, Marko Milivojevic <markom_at_ipexpert.com>wrote:

> This is an awesome option to be aware of in a security conscious
> network, no doubt. There are also countless others. Since this is a
> study list with the primary focus on CCIE Lab preparation, I think
> it's very important to keep an eye on that.
>
> Cisco Live is indeed in July and we're all looking forward hanging
> around in CCIE lounge and attending CCIE party :-)
>
> --
> Marko Milivojevic - CCIE #18427
> Senior Technical Instructor - IPexpert
>
> FREE CCIE training: http://bit.ly/vLecture
>
> Mailto: markom_at_ipexpert.com
> Telephone: +1.810.326.1444
> Web: http://www.ipexpert.com/
>
> On Tue, Apr 26, 2011 at 11:12, Darby Weaver <darby.weaver_at_gmail.com>
> wrote:
> > Recall guys... Some of are actually production engineers and we work in
> the
> > real world with real networks.
> >
> > This is a nice option to be aware of and Cisco Live is in July....
> >
> > Darby
> >
> > http://www.darbyslogs.blogspot.com
> >
> >
> >
> > On Tue, Apr 26, 2011 at 1:38 PM, Steve Di Bias <sdibias_at_gmail.com>
> wrote:
> >>
> >> Well I guess that's why I didn't know this command then, because I read
> >> most of the OSPF 12.4T config guide and didn't remember seeing it!
> Thanks
> >> Marko!
> >>
> >> On Tue, Apr 26, 2011 at 10:32 AM, Marko Milivojevic <
> markom_at_ipexpert.com>
> >> wrote:
> >>>
> >>> I would just like to point out that this is not an option available in
> >>> the IOS version specified to be in the lab (12.4T). While it's
> >>> certainly very interesting, at this time students preparing for the
> >>> CCIE R&S lab need not be concerned with it... Once the IOS is updated
> >>> to 15.1, yes :-).
> >>>
> >>> --
> >>> Marko Milivojevic - CCIE #18427
> >>> Senior Technical Instructor - IPexpert
> >>>
> >>> FREE CCIE training: http://bit.ly/vLecture
> >>>
> >>> Mailto: markom_at_ipexpert.com
> >>> Telephone: +1.810.326.1444
> >>> Web: http://www.ipexpert.com/
> >>>
> >>> On Tue, Apr 26, 2011 at 09:51, Darby Weaver <darby.weaver_at_gmail.com>
> >>> wrote:
> >>> > At your service sir!
> >>> >
> >>> > I thought it was noteworthy and often over-looked...
> >>> >
> >>> > Know your options.
> >>> >
> >>> > Darby
> >>> >
> >>> > http://www.darbyslogs.blogpsot.com
> >>> >
> >>> > Keep in touch Steve.
> >>> >
> >>> >
> >>> >
> >>> >
> >>> >
> >>> >
> >>> > On Tue, Apr 26, 2011 at 11:35 AM, Steve Di Bias <sdibias_at_gmail.com>
> >>> > wrote:
> >>> >
> >>> >> Wow, I knew BGP implemented a command like this, but had no idea
> about
> >>> >> this
> >>> >> within OSPF. Thanks!
> >>> >>
> >>> >>
> >>> >> On Tue, Apr 26, 2011 at 8:22 AM, <darby.weaver_at_gmail.com> wrote:
> >>> >>
> >>> >>> Anyone want to discuss this topic?
> >>> >>>
> >>> >>> ttl-security all-interfaces [hops hop-count]
> >>> >>>
> >>> >>> ip ospf ttl-security [hops hop-count | disable]
> >>> >>>
> >>> >>>
> >>> >>>
> >>> >>>
> http://www.cisco.com/en/US/docs/ios/iproute_ospf/configuration/guide/iro_ttl.html
> >>> >>>
> >>> >>>
> >>> >>>
> >>> >>>
> http://www.cisco.com/en/US/docs/ios/iproute_ospf/command/reference/iro_osp2.html
> >>> >>>
> >>> >>>
> >>> >>>
> >>> >>>
> http://www.cisco.com/en/US/docs/ios/ios_xe/iproute_ospf/configuration/guide/iro_ttl_xe.pdf
> >>> >>>
> >>> >>>
> >>> >>> Blogs and organic groups at http://www.ccie.net
> >>> >>>
> >>> >>>
> >>> >>>
> _______________________________________________________________________
> >>> >>> Subscription information may be found at:
> >>> >>> http://www.groupstudy.com/list/CCIELab.html
> >>> >>>
> >>> >>>
> >>> >>>
> >>> >>>
> >>> >>>
> >>> >>>
> >>> >>>
> >>> >>>
> >>> >>
> >>> >>
> >>> >> --
> >>> >> -Steve Di Bias
> >>> >>
> >>> >
> >>> >
> >>> >
> >>> > --
> >>> > Darby Weaver
> >>> > Network Engineer
> >>> >
> >>> >
> >>> > darbyweaver_at_yahoo.com
> >>> >
> >>> >
> >>> > Blogs and organic groups at http://www.ccie.net
> >>> >
> >>> >
> _______________________________________________________________________
> >>> > Subscription information may be found at:
> >>> > http://www.groupstudy.com/list/CCIELab.html
> >>> >
> >>> >
> >>> >
> >>> >
> >>> >
> >>> >
> >>> >
> >>> >
> >>
> >>
> >>
> >> --
> >> -Steve Di Bias
> >
> >
> >
> > --
> > Darby Weaver
> > Network Engineer
> >
> >
> > darbyweaver_at_yahoo.com
> >
>

-- 
Darby Weaver
Network Engineer
darbyweaver_at_yahoo.com
Blogs and organic groups at http://www.ccie.net