Launching soon: The world's first vendor agnostic bug scrubLearn more & join waitlist
OPERATIONAL DEFECT DATABASE
...
...
ttl-security configuration under BGP neighbor does not affect BGP peering
If the following CLI shows the drop count due to min ttl check show tcp statistics pcb packets dropped due to minttl check show udp statistics pcb packets dropped due to minttl check" show raw statistics pcb packets dropped due to minttl check" It means RX packets are dropped due to min ttl check
If OSPF/ EBGP/BFD are configured with min ttl security feature
ttl security needs to be disabled
RP/0/RP0/CPU0:R1#sh bg neighbor 192.1.107.2 BGP neighbor is 192.1.107.2 Remote AS 6553700, local AS 1, external link Remote router ID 199.0.0.8 BGP state = Established, up for 00:06:01 NSR State: None BFD enabled (initializing) Last read 00:00:00, Last read before reset 00:06:35 Hold time is 90, keepalive interval is 30 seconds Configured hold time: 180, keepalive: 60, min acceptable hold time: 3 Last write 00:00:18, attempted 44, written 44 Second last write 00:00:25, attempted 19, written 19 Last write before reset 00:06:18, attempted 44, written 44 Second last write before reset 00:06:26, attempted 19, written 19 Last write pulse rcvd Sep 18 13:47:18.592 last full Sep 18 13:41:23.692 pulse count 151 Last write pulse rcvd before reset 00:06:18 Socket not armed for io, armed for read, armed for write Last write thread event before reset 00:06:06, second last 00:06:06 Last KA expiry before reset 00:06:26, second last 00:06:56 Last KA error before reset 00:00:00, KA not sent 00:00:00 Last KA start before reset 00:06:26, second last 00:06:56 DMZ-link bandwidth is 10000000 Kb/s Precedence: internet RP/0/RP0/CPU0:R1#sh run router bg 1 neighbor 192.1.107.2 router bgp 1 neighbor 192.1.107.2 remote-as 100.100 bfd fast-detect password encrypted 104C0E093A0317181857 dmz-link-bandwidth ttl-security RP/0/RP0/CPU0:R1#sh version Cisco IOS XR Software, Version 6.5.2.10I Copyright (c) 2013-2018 by Cisco Systems, Inc. Build Information: Built By : ahoang Built On : Tue Sep 11 11:48:20 PDT 2018 Built Host : iox-ucs-027 Workspace : /auto/iox-ucs-027-san2/prod/6.5.2.10I.DT_IMAGE/ncs5500/ws Version : 6.5.2.10I Location : /opt/cisco/XR/packages/ cisco NCS-5500 () processor System uptime is 16 hours 33 minutes