Cisco Cisco Packet Data Gateway (PDG) Guia De Resolução De Problemas
Firewall-and-NAT Policy Configuration Mode Commands
▀ firewall validate-ip-options
▄ Cisco ASR 5000 Series Command Line Interface Reference
OL-22948-01
firewall validate-ip-options
This command enables / disables the Stateful Firewall validation of IP options for errors.
Product
FW
Privilege
Security Administrator, Administrator
Syntax
Configures the default setting.
Default: Disabled. Same as
Default: Disabled. Same as
Disables validation of IP options.
Usage
Use this command to enable / disable Stateful Firewall validation of IP options. When enabled, Stateful
Firewall will drop packets with IP option errors.
For NAT calls, validation of IP Options is disabled.
Firewall will drop packets with IP option errors.
For NAT calls, validation of IP Options is disabled.
Example
The following command enables validation of IP options:
The following command enables validation of IP options: