
Inter-AS Recommendations and Traversing Multiple Provider Trust Model Issues 119
• Generalized TTL Security Mechanism (GTSM)—This checks the TTL of an
incoming BGP update; if the TTL is lower than an expected value (normally 254),
then the packet has been originated “further away” than expected and is likely bogus.
GTSM is described in RFC 3682.
neighbor 192.0.2.1 ttl-security hops 1
• Prefix filtering—No IP prefixes should be exchanged in this model (only VPN-IPv4);
therefore, all IP prefixes should be blocked.
ip prefix-list abc deny 0.0.0.0/0 le 32
• Route-target filtering—Each VPN-IPv4 route comes with a set of RTs, defining to
which VPN the prefix ...