ttl-check (IGMP)

Function

The ttl-check command enables the device to check the TTL values in received IGMP Report, Leave, and Query messages on all interfaces.

The undo ttl-check command restores the default configuration.

By default, the device does not check the TTL values in received IGMP Report, Leave, and Query messages.

Format

ttl-check

undo ttl-check

Parameters

None

Views

IGMP view of the public network instance or IGMP view of the VPN instance

Default Level

2: Configuration level

Usage Guidelines

To protect a device against IGMP message attacks, run the ttl-check command to enable the device to check the TTL values in received IGMP Report, Leave, and Query messages on all interfaces and discard such a message if its TTL value is not 1.

Example

# Enable TTL check for IGMP Report, Leave, and Query messages in the IGMP view.

<HUAWEI> system-view
[HUAWEI] multicast routing-enable
[HUAWEI] igmp
[HUAWEI-igmp] ttl-check