Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

allow-ip-options (IDS MS-MPC)

date_range 19-Nov-23

Syntax

content_copy zoom_out_map
allow-ip-options {
    any;
    loose-source-route;
    route-alert;
    route-record;
    security;
    stream-id;
    strict-source-route;
    timestamp;
}

Hierarchy Level

content_copy zoom_out_map
[edit services ids rule rule-name term term-name then]

Description

Specify the type of IPv4 options that the IDS rule permits in the IP header of a packet. If the packet includes an option that is not configured, the packet is blocked. If the packet includes a configured option whose length is an illegal value, the packet is dropped. This IDS rule can only be assigned to a service set on an MS-MPC.

Default

If you do not include the allow-ip-options statement, packets with any type of IPv4 option are blocked.

Options

any

Allow all IPv4 options.

loose-source-route

Allow the Loose Source Route option.

route-alert

Allow the Router Alert option.

route-record

Allow the Record Route option.

security

Allow the Security option.

stream-id

Allow the Stream ID option.

strict-source-route

Allow the Strict Source Route option.

timestamp

Allow the Time Stamp option.

Required Privilege Level

interface—To view this statement in the configuration.

interface-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 17.1.

footer-navigation