header-integrity-check (Next Gen Services)
Statement introduced in Junos OS Release 19.3R2 on MX Series routers (MX240, MX480 and MX960) running Next Gen Services with the MX-SPC3 services card.
Drop packets that have packet header anomalies. These anomalies include:
Not an IP packet
Not an IPv4 packet or an IPv6 packet
TTL error (TTL is 0)
Bad source/destination IP
IP checksum error
TCP port zero
TCP header length error (less than 20 bytes)
TCP SEQNUM is zero and no flags are set
TCP SEQNUM is zero and flags are set
No TCP flags are set
TCP FIN with no Ack
TCP FIN & Reset
TCP SYN & (FIN or URG or RESET)
UDP port zero
UDP header length error
ICMP header length error (not within 48-576 bytes)
ICMP packet error length
ICMP large packet (1024)
Required Privilege Level
interface—To view this statement in the configuration.
interface-control—To add this statement to the configuration.