Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 

header-integrity-check (Next Gen Services)

 

Syntax

Hierarchy Level

Release Information

Statement introduced in Junos OS Release 19.3R2 on MX Series routers (MX240, MX480 and MX960) running Next Gen Services with the MX-SPC3 services card.

Description

Drop packets that have packet header anomalies. These anomalies include:

  • Not an IP packet

  • Not an IPv4 packet or an IPv6 packet

  • TTL error (TTL is 0)

  • Bad source/destination IP

  • IP checksum error

  • Protocol error

  • TCP port zero

  • TCP header length error (less than 20 bytes)

  • TCP SEQNUM is zero and no flags are set

  • TCP SEQNUM is zero and flags are set

  • No TCP flags are set

  • TCP FIN with no Ack

  • TCP FIN & Reset

  • TCP SYN & (FIN or URG or RESET)

  • UDP port zero

  • UDP header length error

  • ICMP header length error (not within 48-576 bytes)

  • ICMP packet error length

  • ICMP large packet (1024)

Required Privilege Level

interface—To view this statement in the configuration.

interface-control—To add this statement to the configuration.

Related Documentation