- df-bit (clear | copy | set);
- [edit security ipsec vpn vpn-name]
Statement introduced in Release 8.5 of JUNOS software.
Specify how the router handles the Don't Fragment (DF) bit in the outer header.
This statement is supported on J-series and SRX-series devices.
clear—Clear (disable) the DF bit from the outer header. This is the default.
copy—Copy the DF bit to the outer header.
set—Set (enable) the DF bit in the outer header.
For configuration instructions and examples, see the JUNOS Software Security Configuration Guide.
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.