Example: Blocking Packets with Either a Loose or a Strict Source Route Option Set (CLI)

The following example shows how to create the ip-filter-src screen to block packets with either a loose or a strict source route option set. The screen is enabled on the zone security zone, which is the zone from which the packets originate.

To block packets with either the loose or the strict source route option set:

1. Configure the ip-filter-src screen:

   user@host#set security screen ids-option ip-filter-src ip source-route-option

2. Enable the screen on the zone security zone:

   user@host#set security zones security-zone zone screen ip-filter-src

Related Topics

• JUNOS Software Feature Support Reference for SRX Series and J Series Devices