Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

header-integrity-check (Next Gen Services)

Syntax

Hierarchy Level

Description

Drop packets that have packet header anomalies. These anomalies include:

  • Not an IP packet

  • Not an IPv4 packet or an IPv6 packet

  • TTL error (TTL is 0)

  • Bad source/destination IP

  • IP checksum error

  • Protocol error

  • TCP port zero

  • TCP header length error (less than 20 bytes)

  • TCP SEQNUM is zero and no flags are set

  • TCP SEQNUM is zero and flags are set

  • No TCP flags are set

  • TCP FIN with no Ack

  • TCP FIN & Reset

  • TCP SYN & (FIN or URG or RESET)

  • UDP port zero

  • UDP header length error

  • ICMP header length error (not within 48-576 bytes)

  • ICMP packet error length

  • ICMP large packet (1024)

Required Privilege Level

interface—To view this statement in the configuration.

interface-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 19.3R2.

Related Documentation