Configuring GTSM for BGP4

Generalized TTL Security Mechanism (GTSM) can be configured to protect external Border Gateway Protocol (eBGP) peering sessions.
  1. Enter the configure terminal command to access global configuration mode. 
    device# configure terminal
  2. Enter the router bgp command to enable BGP routing. 
    device(config)# router bgp
  3. Enter the local-as command to configure the autonomous system number (ASN) in which your device resides. 
    device(config-bgp-router)# local-as 65520
  4. Enter the neighbor remote-as command to add a neighbor. 
    device(config-bgp-router)# neighbor 10.10.10.1 remote-as 2
  5. Enter the neighbor ebgp-btsh command, specifying an IP address, to enable GTSM. 
    device(config-bgp-router)# neighbor 10.10.10.1 ebgp-btsh

The following example enables GTSM between a device and a neighbor with the IP address 10.10.10.1. 

device# configure terminal
device(config)# router bgp
device(config-bgp-router)# local-as 65520
device(config-bgp-router)# neighbor 10.10.10.1 remote-as 2
device(config-bgp-router)# neighbor 10.10.10.1 ebgp-btsh
Parent topic: Generalized TTL Security Mechanism support