internet-options
Syntax
internet-options {(gre-path-mtu-discovery | no-gre-path-mtu-discovery);icmpv4-rate-limit bucket-size bucket-size packet-rate packet-rate;icmpv6-rate-limit bucket-size bucket-size packet-rate packet-rate;(ipip-path-mtu-discovery | no-ipip-path-mtu-discovery);ipv6-duplicate-addr-detection-transmits;(ipv6-reject-zero-hop-limit | no-ipv6-reject-zero-hop-limit);(ipv6-path-mtu-discovery | no-ipv6-path-mtu-discovery);ipv6-path-mtu-discovery-timeout;no-tcp-rfc1323;no-tcp-rfc1323-paws;(path-mtu-discovery | no-path-mtu-discovery);source-port upper-limit <upper-limit>;(source-quench | no-source-quench);tcp-drop-synfin-set;tcp-mss mss-value;}
Hierarchy Level
[edit system]
Release Information
Statement introduced before JUNOS Release 7.4.
Statement introduced in JUNOS Release 9.0 for EX Series switches.
Description
Configure system IP options to protect against certain types of DoS attacks.
The remaining statements are explained separately.
Required Privilege Level
admin—To view this statement in the configuration.
admin-control—To add this statement to the configuration.