Example: Blocking Large ICMP Packets (CLI)

The following example shows how to configure the icmp-large screen to block large ICMP packets originating from the zone security zone.

To block large ICMP packets:

1. Configure the icmp-large screen:

   user@host# set security screen ids-option icmp-large icmp large

2. Configure the zone security zone:

   user@host# set security zones security-zone zone screen icmp-large

Related Topics

• Junos OS Feature Support Reference for SRX Series and J Series Devices