Enabling IP Options Filtering

You can filter packets with IP options on an interface:

• Issue the ip filter-options all command.
  host1(config-if)#ip filter-options all

When a packet arrives on an interface, the router checks to see if the packet contains IP options. If it does and if IP options filtering is enabled, that packet is dropped. IP options filtering is disabled by default.

Related Documentation

• Classifier Groups and Policy Rules Overview
• ip filter-options all