Configuring OSPFv3 GTSM

Procedure

1. Configure basic OSPFv3 GTSM functions.

   To apply the GTSM, you need to enable GTSM on both ends of the OSPFv3 connection.

   1. Run system-view

      The system view is displayed.

   2. Run ospfv3 valid-ttl-hops ttl [ vpn-instance vpn-instance-name ]

      The OSPFv3 GTSM is configured.

      

      • The ospfv3 valid-ttl-hops command has two functions: enabling the OSPFv3 GTSM and configuring the TTL value to be detected. The vpn-instance parameter is valid only for the latter function.

      • The valid TTL range of detected packets is [255 - hops + 1, 255].

   3. Run commit

      The configuration is committed.

2. Set the default action for packets that do not match the GTSM policy.

   GTSM only checks the TTL values of packets that match the GTSM policy. Packets that do not match the GTSM policy can be allowed or dropped.

   You can enable the log function to record packet drop for troubleshooting.

   Perform the following configurations on the GTSM-enabled router:

   1. Run system-view

      The system view is displayed.

   2. Run gtsm default-action { drop | pass }

      The default action for packets that do not match the GTSM policy is configured.

      

      If the default action is configured but no GTSM policy is configured, GTSM does not take effect.

      This command is supported only on the Admin-VS and cannot be configured in other VSs. This command takes effect on all VSs.

   3. Run commit

      The configuration is committed.