Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 

allow-ip-options (IDS MS-MPC)

 

Syntax

Hierarchy Level

Release Information

Statement introduced in Junos OS Release 17.1.

Description

Specify the type of IPv4 options that the IDS rule permits in the IP header of a packet. If the packet includes an option that is not configured, the packet is blocked. If the packet includes a configured option whose length is an illegal value, the packet is dropped. This IDS rule can only be assigned to a service set on an MS-MPC.

Default

If you do not include the allow-ip-options statement, packets with any type of IPv4 option are blocked.

Options

anyAllow all IPv4 options.
loose-source-routeAllow the Loose Source Route option.
route-alertAllow the Router Alert option.
route-recordAllow the Record Route option.
securityAllow the Security option.
stream-idAllow the Stream ID option.
strict-source-routeAllow the Strict Source Route option.
timestampAllow the Time Stamp option.

Required Privilege Level

interface—To view this statement in the configuration.

interface-control—To add this statement to the configuration.