Re: OSPF TTL Security

This is an awesome option to be aware of in a security conscious
network, no doubt. There are also countless others. Since this is a
study list with the primary focus on CCIE Lab preparation, I think
it's very important to keep an eye on that.

Cisco Live is indeed in July and we're all looking forward hanging
around in CCIE lounge and attending CCIE party :-)

--
Marko Milivojevic - CCIE #18427
Senior Technical Instructor - IPexpert
FREE CCIE training: http://bit.ly/vLecture
Mailto: markom_at_ipexpert.com
Telephone: +1.810.326.1444
Web: http://www.ipexpert.com/
On Tue, Apr 26, 2011 at 11:12, Darby Weaver <darby.weaver_at_gmail.com> wrote:
> Recall guys...B  Some of are actually production engineers and we work in the
> real world with real networks.
>
> This is a nice option to be aware of and Cisco Live is in July....
>
> Darby
>
> http://www.darbyslogs.blogspot.com
>
>
>
> On Tue, Apr 26, 2011 at 1:38 PM, Steve Di Bias <sdibias_at_gmail.com> wrote:
>>
>> Well I guess that's why I didn't know this command then, because I read
>> most of the OSPF 12.4T config guide and didn't remember seeing it! Thanks
>> Marko!
>>
>> On Tue, Apr 26, 2011 at 10:32 AM, Marko Milivojevic <markom_at_ipexpert.com>
>> wrote:
>>>
>>> I would just like to point out that this is not an option available in
>>> the IOS version specified to be in the lab (12.4T). While it's
>>> certainly very interesting, at this time students preparing for the
>>> CCIE R&S lab need not be concerned with it... Once the IOS is updated
>>> to 15.1, yes :-).
>>>
>>> --
>>> Marko Milivojevic - CCIE #18427
>>> Senior Technical Instructor - IPexpert
>>>
>>> FREE CCIE training: http://bit.ly/vLecture
>>>
>>> Mailto: markom_at_ipexpert.com
>>> Telephone: +1.810.326.1444
>>> Web: http://www.ipexpert.com/
>>>
>>> On Tue, Apr 26, 2011 at 09:51, Darby Weaver <darby.weaver_at_gmail.com>
>>> wrote:
>>> > At your service sir!
>>> >
>>> > I thought it was noteworthy and often over-looked...
>>> >
>>> > Know your options.
>>> >
>>> > Darby
>>> >
>>> > http://www.darbyslogs.blogpsot.com
>>> >
>>> > Keep in touch Steve.
>>> >
>>> >
>>> >
>>> >
>>> >
>>> >
>>> > On Tue, Apr 26, 2011 at 11:35 AM, Steve Di Bias <sdibias_at_gmail.com>
>>> > wrote:
>>> >
>>> >> Wow, I knew BGP implemented a command like this, but had no idea about
>>> >> this
>>> >> within OSPF. Thanks!
>>> >>
>>> >>
>>> >> On Tue, Apr 26, 2011 at 8:22 AM, <darby.weaver_at_gmail.com> wrote:
>>> >>
>>> >>> Anyone want to discuss this topic?
>>> >>>
>>> >>> ttl-security all-interfaces [hops hop-count]
>>> >>>
>>> >>> ip ospf ttl-security [hops hop-count | disable]
>>> >>>
>>> >>>
>>> >>>
>>> >>> http://www.cisco.com/en/US/docs/ios/iproute_ospf/configuration/guide/iro_ttl.html
>>> >>>
>>> >>>
>>> >>>
>>> >>> http://www.cisco.com/en/US/docs/ios/iproute_ospf/command/reference/iro_osp2.html
>>> >>>
>>> >>>
>>> >>>
>>> >>> http://www.cisco.com/en/US/docs/ios/ios_xe/iproute_ospf/configuration/guide/iro_ttl_xe.pdf
>>> >>>
>>> >>>
>>> >>> Blogs and organic groups at http://www.ccie.net
>>> >>>
>>> >>>
>>> >>> _______________________________________________________________________
>>> >>> Subscription information may be found at:
>>> >>> http://www.groupstudy.com/list/CCIELab.html
>>> >>>
>>> >>>
>>> >>>
>>> >>>
>>> >>>
>>> >>>
>>> >>>
>>> >>>
>>> >>
>>> >>
>>> >> --
>>> >> -Steve Di Bias
>>> >>
>>> >
>>> >
>>> >
>>> > --
>>> > Darby Weaver
>>> > Network Engineer
>>> >
>>> >
>>> > darbyweaver_at_yahoo.com
>>> >
>>> >
>>> > Blogs and organic groups at http://www.ccie.net
>>> >
>>> > _______________________________________________________________________
>>> > Subscription information may be found at:
>>> > http://www.groupstudy.com/list/CCIELab.html
>>> >
>>> >
>>> >
>>> >
>>> >
>>> >
>>> >
>>> >
>>
>>
>>
>> --
>> -Steve Di Bias
>
>
>
> --
> Darby Weaver
> Network Engineer
>
>
> darbyweaver_at_yahoo.com
Blogs and organic groups at http://www.ccie.net