user@host# set security screen ids-option icmp-fragment icmp fragment user@host# set security zones security-zone zone screen icmp-fragment