allow-ip-options (IDS MS-MPC)
Syntax
allow-ip-options {
any;
loose-source-route;
route-alert;
route-record;
security;
stream-id;
strict-source-route;
timestamp;
}
Hierarchy Level
[edit services ids rule rule-name term term-name then]
Description
Specify the type of IPv4 options that the IDS rule permits in the IP header of a packet. If the packet includes an option that is not configured, the packet is blocked. If the packet includes a configured option whose length is an illegal value, the packet is dropped. This IDS rule can only be assigned to a service set on an MS-MPC.
Default
If you do not include the allow-ip-options statement, packets with any type of IPv4 option are blocked.
Options
| any | Allow all IPv4 options. |
| loose-source-route | Allow the Loose Source Route option. |
| route-alert | Allow the Router Alert option. |
| route-record | Allow the Record Route option. |
| security | Allow the Security option. |
| stream-id | Allow the Stream ID option. |
| strict-source-route | Allow the Strict Source Route option. |
| timestamp | Allow the Time Stamp option. |
Required Privilege Level
interface—To view this statement in the configuration.
interface-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 17.1.