user@host# set security screen ids-option icmp-large icmp large user@host# set security zones security-zone zone screen icmp-large