To prevent attackers from forging BGP messages to attack devices, you can protect devices by configuring the CTSM function to detect the range of TTL values in the IP message header. If a device is…

To prevent attackers from forging BGP messages to attack devices, you can protect devices by configuring the CTSM function to detect the range of TTL values in the IP message header. If a device is configured with "peer xxxx valid-ttl-hops 100", the valid range of TTL values of the detected messages is [(), 255].